CVEブラウザに戻る

CVE-2017-6327

Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score92.6820%

EPSS Percentile95.05th

Published2017年8月11日

Last Modified2026年4月21日

Vulnerability Description

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.

Affected Platforms (CPE)

📦

Symantec

Message Gateway

< 10.6.3-267

References & Advisories

🔗 http://seclists.org/fulldisclosure/2017/Aug/28

🔗 http://www.securityfocus.com/bid/100135

🔗 https://www.exploit-db.com/exploits/42519/

🔗 https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00

🔗 http://seclists.org/fulldisclosure/2017/Aug/28

🔗 http://www.securityfocus.com/bid/100135

🔗 https://www.exploit-db.com/exploits/42519/

🔗 https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00

関連する脆弱性情報

CVE-2017-632610.0

The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual ...

CVE-2018-1246410.0

A SQL injection vulnerability in the web administration and quarantine components of Micro Focus Secure Messaging Gateway allows a...

CVE-2011-191910.0

Multiple stack-based buffer overflows in GE Intelligent Platforms Proficy Applications before 4.4.1 SIM 101 and 5.x before 5.0 SIM...

CVE-2020-272659.8

KEPServerEX: v6.0 to v6.9, ThingWorx Kepware Server: v6.8 and v6.9, ThingWorx Industrial Connectivity: All versions, OPC-Aggregato...