Symantec Diagnostic Tool up to 3.0.78 Local Privilege Escalation

Summaryinfo

A vulnerability identified as critical has been detected in Symantec Diagnostic Tool up to 3.0.78. This impacts an unknown function. This manipulation causes Local Privilege Escalation. This vulnerability is registered as CVE-2025-0893. The attack needs to be launched locally. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Symantec Diagnostic Tool up to 3.0.78. It has been declared as critical. Affected by this vulnerability is some unknown functionality. The manipulation with an unknown input leads to a local privilege escalation vulnerability. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.

The advisory is shared at support.broadcom.com. This vulnerability is known as CVE-2025-0893 since 01/30/2025. The exploitation appears to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available.

Upgrading to version 3.0.79 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Symantec

Name

• Diagnostic Tool

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9
• 3.0.10
• 3.0.11
• 3.0.12
• 3.0.13
• 3.0.14
• 3.0.15
• 3.0.16
• 3.0.17
• 3.0.18
• 3.0.19
• 3.0.20
• 3.0.21
• 3.0.22
• 3.0.23
• 3.0.24
• 3.0.25
• 3.0.26
• 3.0.27
• 3.0.28
• 3.0.29
• 3.0.30
• 3.0.31
• 3.0.32
• 3.0.33
• 3.0.34
• 3.0.35
• 3.0.36
• 3.0.37
• 3.0.38
• 3.0.39
• 3.0.40
• 3.0.41
• 3.0.42
• 3.0.43
• 3.0.44
• 3.0.45
• 3.0.46
• 3.0.47
• 3.0.48
• 3.0.49
• 3.0.50
• 3.0.51
• 3.0.52
• 3.0.53
• 3.0.54
• 3.0.55
• 3.0.56
• 3.0.57
• 3.0.58
• 3.0.59
• 3.0.60
• 3.0.61
• 3.0.62
• 3.0.63
• 3.0.64
• 3.0.65
• 3.0.66
• 3.0.67
• 3.0.68
• 3.0.69
• 3.0.70
• 3.0.71
• 3.0.72
• 3.0.73
• 3.0.74
• 3.0.75
• 3.0.76
• 3.0.77
• 3.0.78

License

• commercial

Website

• Vendor: https://www.symantec.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion