CVE-2012-3579
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account,...
CVE-2012-3579 is a high vulnerability (CVSS 7.9) in Symantec Messaging Gateway, published August 29, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 40.2%, the 98th percentile. No source names a fixed version.
- Severity
- 7.9 HighCVSS 2.0, NVD
- Exploit chance
- 40.2%EPSS, 98th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | Symantec Messaging Gateway 9.5 Default SSH Password Vulnerability | 2012-08-27 |
| Exploit-DB | Symantec Messaging Gateway 9.5/9.5.1 - SSH Default Password Security Bypass (Metasploit) | 2012-08-30 |
What each source reports
NVD Score used
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
CVE-2012-3579- CVSS 2.0
- 7.9 High
AV:A/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
CVE-2012-3579- Updated
- 2026-11-02
EUVDEUVD-2012-3526No score
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
EUVD-2012-3526- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gqmh-7vv7-cv43No score
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account,...
Symantec Messaging Gateway (SMG) before 10.0 has a default password for an unspecified account, which makes it easier for remote attackers to obtain privileged access via an SSH session.
- Record
GHSA-gqmh-7vv7-cv43- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
packetstormsecurity.com/files/116277/Symantec-Messaging-Gateway-9.5-Default-SSH-Password.html
securityfocus.com/bid/55143
symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120827_00
exchange.xforce.ibmcloud.com/vulnerabilities/78034
nvd.nist.gov/vuln/detail/CVE-2012-3579
github.com/advisories/GHSA-gqmh-7vv7-cv43