Are SEPM/SEP client/LUA vulnerable to Open SSL vulnerabilities CVE-2025-0509, CVE-2025-21502 ?

Products

• Endpoint Protection

Issue/Introduction

Are SEPM/SEP client/LUA vulnerable to Open SSL vulnerabilities CVE-2025-0509, CVE-2025-21502 ?

Resolution

Symantec Endpoint Protection (SEP) client (Windows/Mac/Linux), LiveUpdate Administrator (LUA) is not affected.  

For Symantec Endpoint Protection Manager (SEPM) - Potential impact. We are unable to determine with certainty that the SEPM would be impacted, but it may be possible. We are planning to upgrade to a newer version of this component in our next release. Our recommendation would be to upgrade once the new version is available.