Eleftherios Panos

**Name of the Vulnerable Software and Affected Versions** Broadcom Symantec Endpoint Management Suite (Altiris) (affected versions not specified) **Description** The software contains a critical vulnerability that allows remote attackers to execute arbitrary code in the context of the vulnerable service process. The vulnerability was discovered during a red team engagement involving a legacy .NET Remoting service. The issue involves an unauthenticated remote code execution (RCE) vulnerability within the Broadcom Symantec Altiris Inventory Rule Management. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Block port 4011. Update configurations.

**Name of the Vulnerable Software and Affected Versions** .NET Framework (affected versions not specified) .NET Core (affected versions not specified) .NET (affected versions not specified) **Description** The issue is related to insufficient input validation in the .NET Framework, .NET Core, and .NET platforms. This can be exploited by an attacker to execute arbitrary code using specially crafted data. The vulnerability allows remote attackers to execute arbitrary code and impact the system. **Recommendations** For .NET Framework, update to a version that includes the fix for this issue. For .NET Core, update to a version that includes the fix for this issue. For .NET, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.