CVE-2012-3579
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account,...
CVE-2012-3579 is a high vulnerability (CVSS 7.9) in Symantec Messaging Gateway, published August 29, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 40.2%, the 98th percentile. No source names a fixed version.
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
Exploit likelihood
What each source reports
NVD Score used
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
CVE-2012-3579- CVSS 2.0
- 7.9 High
AV:A/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
CVE-2012-3579- Updated
- 2026-11-02
EUVDEUVD-2012-3526 No score
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
EUVD-2012-3526- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gqmh-7vv7-cv43 No score
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account,...
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
GHSA-gqmh-7vv7-cv43- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Symantec Messaging Gateway 9.5/9.5.1 - SSH Default Password Security Bypass (Metasploit) | 2012-08-30 |
| Metasploit | Symantec Messaging Gateway 9.5 Default SSH Password Vulnerability | 2012-08-27 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
References
packetstormsecurity.com/files/116277/Symantec-Messaging-Gateway-9.5-Default-SSH-Password.html
securityfocus.com/bid/55143
symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00
exchange.xforce.ibmcloud.com/vulnerabilities/78034
nvd.nist.gov/vuln/detail/CVE-2012-3579
github.com/advisories/GHSA-gqmh-7vv7-cv43