{"id":"CVE-2017-6327","aliases":["EUVD-2017-15388","GHSA-x45p-q5pf-h9jx"],"status":"published","title":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution,...","description":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.35911,"percentile":0.9848,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-20","CWE-77"],"published":"2017-08-11T20:00:00Z","modified":"2026-06-17T01:22:09Z","kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2021-11-03"},{"source":"kev","since":"2021-11-03"}],"exploits":[{"source":"exploitdb","id":"EDB-42519","title":"Symantec Messaging Gateway 10.6.3-2 - Root Remote Command Execution","type":"webapps","platform":"jsp","date":"2017-08-18","verified":true,"url":"https://www.exploit-db.com/exploits/42519"}],"products":[{"vendor":"symantec","product":"message_gateway"},{"vendor":"symantec","product":"symantec messaging gateway"},{"vendor":"symantec corporation","product":"messaging gateway"}],"references":[{"url":"http://seclists.org/fulldisclosure/2017/Aug/28","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/42519/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/100135","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=\u0026suid=20170810_00","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6327","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6327"},{"url":"https://www.exploit-db.com/exploits/42519"},{"url":"https://github.com/advisories/GHSA-x45p-q5pf-h9jx"}],"sources":{"cve":[{"id":"CVE-2017-6327","description":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.","status":"published","published":"2017-08-11T20:00:00Z","modified":"2025-10-21T23:55:35.541Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:33:16.916541Z"}],"euvd":[{"id":"EUVD-2017-15388","description":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.","status":"published","published":"2017-08-11T20:00:00Z","modified":"2025-10-21T23:55:35Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"exploited_since":"2021-11-03","updated_at":"2026-11-02T20:31:23.427989Z"}],"ghsa":[{"id":"GHSA-x45p-q5pf-h9jx","title":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution,...","description":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.","status":"published","published":"2022-05-13T01:46:30Z","modified":"2025-10-22T00:31:24Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20","CWE-77"],"updated_at":"2026-11-02T15:04:03.556367Z"}],"kev":[{"id":"CVE-2017-6327","title":"Symantec Messaging Gateway Remote Code Execution Vulnerability","description":"Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.","cwes":["CWE-20"],"kev":{"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:17.050017Z"}],"nvd":[{"id":"CVE-2017-6327","description":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.","status":"published","published":"2017-08-11T20:29:00.207Z","modified":"2026-06-17T01:22:09.62Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:03:57.82609Z"}]}}