CVE-2013-5016: Broadcom Symantec Critical System Protection

High severity, CVSS 7.6. EPSS: 2.4% chance of exploitation in the next 30 days.

Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.

Affected products

• Broadcom Symantec Critical System Protection: up to and including 5.2.8

Published 2014-05-08. Last modified 2026-06-16.