CVE-2013-5010: The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x bef...

Security readout for executives and security teams

CVE-2013-5010 is a policy bypass in Symantec Endpoint Protection’s Application/Device Control client component. A local user could bypass intended custom policy restrictions and access files or directories that should have been blocked. This mainly matters where SEP ADC policies enforce sensitive data or device access controls. Exposure is most likely in legacy environments still running affected SEP client versions with ADC custom policies enabled. Modern or upgraded deployments may not be affected, but confirm installed client versions and policy usage. Treat this as a legacy endpoint-control exposure. It is not shown as actively exploited, but it can weaken file and device restrictions on affected endpoints. Prioritize remediation where SEP ADC policies protect regulated data, administrator workstations, or shared systems. Mitigation focus: Upgrade affected SEP clients to the fixed versions or later.; Review Symantec/Broadcom advisory guidance before changing production policy enforcement.; Prioritize endpoints where ADC protects sensitive file paths or device access..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.