CVE-2017-6327 The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely....
HighCVSS 8.8
EPSS 35.9%
CISA KEV
added 2021-11-03 · due 2022-05-03
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.
CISA Known Exploited Vulnerability
- Date added
- 2021-11-03
- Due date (FCEB)
- 2022-05-03
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec message gateway | < 10.6.3-267 | 10.6.3-267 |
| symantec messaging gateway | = All versions prior to version 10.6.3-267 | No fix listed |
References
- 20170817 CVE-2017-6327: Symantec Messaging Gateway <= 10.6.3-2 unauthenticated root RCE mailing-list third-party-advisory
- 100135 broken-link third-party-advisory vdb-entry
- 42519 exploit third-party-advisory vdb-entry
- www.symantec.com vendor-advisory
- www.cisa.gov government-resource us-government-resource