Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2017-6327
HistoryNov 03, 2021 - 12:00 a.m.

Symantec Messaging Gateway Remote Code Execution Vulnerability

2021-11-0300:00:00
CISA
www.cisa.gov
3
symantec
messaging gateway
remote code execution
vulnerability
privilege escalation

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.175

Percentile

96.2%

JSON

Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.

Related

packetstorm 1
zdt 1
dsquare 1
seebug 1
cve 1
canvas 1
exploitdb 1
cvelist 1
nvd 1
prion 1
checkpoint_advisories 1
exploitpack 1
attackerkb 1
openvas 1
nessus 1
symantec 1
threatpost 1
qualysblog 2
ics 1
packetstorm
packetstorm
Symantec Messaging Gateway 10.6.3-2 Remote Code Execution
2017-08-18 00:00:00
zdt
zdt
Symantec Messaging Gateway 10.6.3-2 - Unauthenticated root Remote Command Execution
2017-08-19 00:00:00
dsquare
dsquare
Symantec Messaging Gateway RestoreAction.performRestore() RCE
2017-09-01 00:00:00
seebug
seebug
Symantec Messaging Gateway <= 10.6.3-2 unauthenticated root RCE(CVE-2017-6327)
2017-08-21 00:00:00
cve
cve
CVE-2017-6327
2017-08-11 20:29:00
canvas
canvas
Immunity Canvas: BRIGHTMAIL_RESTORE
2017-08-11 20:29:00
exploitdb
exploitdb
Symantec Messaging Gateway 10.6.3-2 - Root Remote Command Execution
2017-08-18 00:00:00
cvelist
cvelist
CVE-2017-6327
2017-08-11 20:00:00
nvd
nvd
CVE-2017-6327
2017-08-11 20:29:00
prion
prion
Design/Logic Flaw
2017-08-11 20:29:00
checkpoint_advisories
checkpoint_advisories
Symantec Messaging Gateway performRestore Command Injection (CVE-2017-6327)
2017-09-03 00:00:00
exploitpack
exploitpack
Symantec Messaging Gateway 10.6.3-2 - Root Remote Command Execution
2017-08-18 00:00:00
attackerkb
attackerkb
CVE-2017-6327
2017-08-11 00:00:00
openvas
openvas
Symantec Messaging Gateway Multiple Vulnerabilities (Aug 2017)
2017-08-14 00:00:00
nessus
nessus
Symantec Messaging Gateway 10.x < 10.6.3-267 Multiple Vulnerabilities (SYM17-006)
2017-08-16 00:00:00
symantec
symantec
Symantec Messaging Gateway RCE and CSRF
2017-08-10 08:00:00
threatpost
threatpost
Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks
2020-10-21 20:31:17
qualysblog
qualysblog
NSA Alert: Chinese State-Sponsored Actors Exploit Known Vulnerabilities
2020-10-22 23:10:29
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
ics
ics
Potential for China Cyber Response to Heightened U.S.–China Tensions
2020-10-20 12:00:00

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.175

Percentile

96.2%

JSON
Related for CISA-KEV-CVE-2017-6327
packetstorm1zdt1dsquare1seebug1cve1canvas1exploitdb1cvelist1nvd1prion1checkpoint_advisories1exploitpack1attackerkb1openvas1nessus1symantec1threatpost1qualysblog2ics1