CVE-2011-3478

The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite...

10.0 HighPublic exploit

The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), does not properly filter login and authentication data, which allows remote attackers to execute arbitrary code via a crafted session on TCP port 5631.

Exploit likelihood

39.5%Up 20.9 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2011-3478
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-3478
Updated: 2026-11-02

EUVDEUVD-2011-3441 No score

Record: EUVD-2011-3441
Updated: 2026-11-03

GitHub AdvisoriesGHSA-m4r6-h5gf-6mg9 No score

The host-services component in Symantec pcAnywhere 12.5.x through 12.5.3, and IT Management Suite...

Record: GHSA-m4r6-h5gf-6mg9
Weakness: CWE-287
Updated: 2026-11-02

Affected products

symantec pcanywhere

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Symantec pcAnywhere 12.5.0 - 'Login' / 'Password' Remote Buffer Overflow	2012-06-27
Exploit-DB	Symantec pcAnywhere 12.5.0 (Windows x86) - Remote Code Execution	2015-11-02

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-3478 is a high vulnerability (CVSS 10.0) in Symantec Pcanywhere, published January 25, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 39.5%, the 98th percentile. No source names a fixed version.