Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-0893 Details

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.

CVSS 3.x Severity and Vector Strings:

CNA: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25417	[email protected]	AdvisoryRemedyVendor

CWE-ID	CWE Name	Source
CWE-269	Improper Privilege Management	CISA-ADP

Product	Versions
Symantec Diagnostic Tool	< 3.0.79 (semver)
CPE cpe:2.3:a:symantec:symdiag:::::::: Remediation Upgrade: 3.0.79moderate effort Mitigation:low effort Restrict access to administrative or management systems to authorized privileged users. Mitigation:low effort Restrict remote access to trusted/authorized systems only. Mitigation:low effort Run under the principle of least privilege, where possible, to limit the impact of potential exploit. Mitigation:low effort Keep all operating systems and applications current with vendor patches. Mitigation:low effort Follow a multi-layered approach to security. At a minimum, run both firewall and anti-malware applications to provide multiple points of detection and protection for both inbound and outbound threats. Mitigation:low effort Deploy network and host-based intrusion detection systems to monitor network traffic for signs of anomalous or suspicious activity. This may aid in the detection of attacks or malicious activity related to the exploitation of latent vulnerabilities.

Product

Versions

Symantec Diagnostic Tool

< 3.0.79 (semver)

Upgrade: 3.0.79moderate effort
Mitigation:low effort
Restrict access to administrative or management systems to authorized privileged users.
Mitigation:low effort
Restrict remote access to trusted/authorized systems only.
Mitigation:low effort
Run under the principle of least privilege, where possible, to limit the impact of potential exploit.
Mitigation:low effort
Keep all operating systems and applications current with vendor patches.
Mitigation:low effort
Follow a multi-layered approach to security. At a minimum, run both firewall and anti-malware applications to provide multiple points of detection and protection for both inbound and outbound threats.
Mitigation:low effort
Deploy network and host-based intrusion detection systems to monitor network traffic for signs of anomalous or suspicious activity. This may aid in the detection of attacks or malicious activity related to the exploitation of latent vulnerabilities.

4 change records found show changes

QUICK INFO