CVE-2017-6327
Published 2017-08-11 · Updated 2026-06-17 · Source secure@symantec.com
Summary
CVE-2017-6327 is a high-severity (CVSS 8.8) vulnerability in Symantec Symantec Messaging Gateway. CISA added it to the Known Exploited Vulnerabilities catalog on November 3, 2021, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by May 3, 2022. CISA does not currently list it as used in ransomware campaigns.
All 1 known-exploited Symantec vulnerabilities →Description
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Symantec — Symantec Messaging Gateway
Name: Symantec Messaging Gateway Remote Code Execution Vulnerability
Date added: 2021-11-03 · Due: 2022-05-03
Required action: Apply updates per vendor instructions.
References
- http://seclists.org/fulldisclosure/2017/Aug/28
- http://www.securityfocus.com/bid/100135
- https://www.exploit-db.com/exploits/42519/
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00
- http://seclists.org/fulldisclosure/2017/Aug/28
- http://www.securityfocus.com/bid/100135
- https://www.exploit-db.com/exploits/42519/
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00