CVE-2025-24505 — Broadcom / Symantec Privileged Access Management

CVE-2025-24505

Broadcom / Symantec Privileged Access Management PUBLISHED

Description (CNA)

This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file.

Affected (CNA)

Vendor / product	Versions
Broadcom / Symantec Privileged Access Management	affected 3.4.6; affected 4.1.0 through 4.1.8

CWE

No CWE identifiers supplied.

References

https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25362

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.