This vulnerability in Broadcom Symantec Management Suite (versions 8.7.3, 8.8, and 8.8.1) enables a non-administrator interactive user to escalate privileges to full SYSTEM code execution by leveraging a logic chain involving DCOM and the task scheduler. The exploit does not require network access or memory corruption, indicating a local privilege escalation vector. The CVSS 4.0 vector indicates low attack complexity, low attack vector (local), and required user interaction. The vulnerability is classified under CWE-269 (Improper Privilege Management). No vendor advisory or patch information is available at this time.

An attacker with non-administrator interactive access can gain full SYSTEM privileges on the affected system. This allows complete control over the system, including the ability to execute arbitrary code with the highest privileges. The attack requires local access and user interaction but does not rely on network access or memory corruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict interactive user access to trusted personnel only and monitor for suspicious local activity. No official remediation or temporary fix is currently documented.