CVE-2024-23613

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM.

Score

CVSS 3.1 10.0 Critical

Status

Modified - disclosures@exodusintel.com

Published

2024-01-26

Last modified

2025-05-29

Weaknesses

CWE-119, CWE-120

Affected products

• Symantec Deployment Solutions (Broadcom)
• Deployment Solution (Symantec)

References

• https://blog.exodusintel.com/2024/01/25/symantec-deployment-solution-axengine-exe-buffer-overflow-remote-code-execution