CVE-2025-24508mediumCWE-522

CVE-2025-24508: medium-severity vulnerability in Broadcom Symantec IT Management Suite

Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite

Published

Follow this CVE+ Monitor Symantec IT Management Suite

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.4epss 0.1%
Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Broadcom · Symantec IT Management Suite
Related CVEs — Broadcom Symantec IT Management Suite

In the same product, most dangerous first.

CVE-2025-5333CRITICALUnauthenticated Remote Code Execution in IT Management SuiteEPSS 0.7%CVE-2026-15379MEDIUMArbitrary File Read as SYSTEM in Symantec ITMSEPSS 0.1%