CVE-2021-30648: Broadcom Symantec Advanced Secure Gateway 500-10 Firmware

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.

Affected products

• Broadcom Symantec Advanced Secure Gateway 500-10 Firmware: from 6.6, before 6.7.4.17 (fixed in 6.7.4.17); from 6.7.5.0, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)
• Broadcom Symantec Advanced Secure Gateway s200-30 Firmware: from 6.6, before 6.7.4.17 (fixed in 6.7.4.17); from 6.7.5.0, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)
• Broadcom Symantec Advanced Secure Gateway s200-40 Firmware: from 6.6, before 6.7.4.17 (fixed in 6.7.4.17); from 6.7.5.0, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)
• Broadcom Symantec Advanced Secure Gateway s400-20 Firmware: from 6.6, before 6.7.4.17 (fixed in 6.7.4.17); from 6.7.5.0, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)
• Broadcom Symantec Advanced Secure Gateway s400-30 Firmware: from 6.6, before 6.7.4.17 (fixed in 6.7.4.17); from 6.7.5.0, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)
• Broadcom Symantec Advanced Secure Gateway s400-40 Firmware: from 6.6, before 6.7.4.17 (fixed in 6.7.4.17); from 6.7.5.0, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)
• Broadcom Symantec Advanced Secure Gateway s500-20 Firmware: from 6.6, before 6.7.4.17 (fixed in 6.7.4.17); from 6.7.5.0, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)
• Broadcom Symantec Proxysg: from 6.5, before 6.5.10.16 (fixed in 6.5.10.16); from 6.6, before 6.6.5.19 (fixed in 6.6.5.19); from 6.7, before 6.7.5.12 (fixed in 6.7.5.12); from 7.2, before 7.2.7.2 (fixed in 7.2.7.2); from 7.3, before 7.3.3.3 (fixed in 7.3.3.3)

Published 2021-06-30. Last modified 2026-06-17.