CVE-2020-5833

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-11 · updated 2026-06-17
Weakness: CWE-125

Description

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program.

Affected products

Symantec Endpoint Protection Manager (SEPM): before 14.3 — fixed in 14.3

How to fix

Upgrade to a fixed version: Symantec Endpoint Protection Manager (SEPM) 14.3. Check the vendor advisory for mitigations.

References

https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762
https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1762

Get alerted when CVE-2020-5833 or the next vulnerability affects your stack