CVE-2024-23616

The vulnerability results from improper memory handling (CWE-119, CWE-120) in the axengine.exe component, leading to buffer overflow. An attacker can send appropriately crafted data over the network without needing to authenticate in the system. Successful exploitation of the vulnerability allows taking control of the process and executing code in its context.

An attacker gains the ability to execute arbitrary code (RCE) with SYSTEM account privileges, which means complete takeover of the attacked server, including access to all data and the ability to further spread within the network.

Apply patches available from the manufacturer according to the references. Additionally, it is recommended to restrict network access to the axengine.exe component using firewall rules so that it is accessible only from trusted IP addresses until the update is deployed.

Broadcom Symantec Server Management Suite version 7.9 and earlier