{"schemaVersion":3,"id":"CVE-2017-6327","aliases":[],"status":"published","duplicateOf":null,"title":"Symantec Messaging Gateway Remote Code Execution Vulnerability","description":"The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.","dates":{"published":"2017-08-11T20:00:00.000Z","modified":"2025-10-21T23:55:35.541Z","reserved":null,"kevAdded":["2021-11-03T00:00:00.000Z"],"kevDue":["2022-05-03T00:00:00.000Z"]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.5,"severity":"medium","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.35911,"percentile":0.98458,"severity":"high","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.35911},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.35341,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.35341,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.35341,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.35911,"percentile":0.98458}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.35911,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.35911,"percentile":0.98458}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-11-03T00:00:00.000Z","dueDate":"2022-05-03T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Symantec Messaging Gateway Remote Code Execution Vulnerability","description":"Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2017-6327","label":"nvd.nist.gov/vuln/detail/CVE-2017-6327"}],"vendor":"Symantec","product":"Symantec Messaging Gateway","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2021-11-03T00:00:00.000Z","dueDate":"2022-05-03T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Symantec Messaging Gateway Remote Code Execution Vulnerability","description":"Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2017-6327","label":"nvd.nist.gov/vuln/detail/CVE-2017-6327"}],"vendor":"Symantec","product":"Symantec Messaging Gateway","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"42519","name":"Symantec Messaging Gateway 10.6.3-2 - Root Remote Command Execution","source":"exploit-database","url":"https://www.exploit-db.com/exploits/42519","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":null,"platforms":["jsp"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"webapps","platform":"jsp","file":"exploits/jsp/webapps/42519.txt","codes":["CVE-2017-6327"]},"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-77","name":"Improper Neutralization of Special Elements used in a Command ('Command Injection')","description":"The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/77.html"}],"affected":[{"vendor":"symantec corporation","product":"messaging gateway","name":"Messaging Gateway","label":"messaging gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions prior to version 10.6.3-267","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions prior to version 10.6.3-267","eol":null,"hubHref":"/vendor/symantec_corporation/messaging_gateway"},{"vendor":"symantec","product":"message_gateway","name":"message gateway","label":"message_gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 10.6.3-267","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.6.3-267","eol":null,"hubHref":"/vendor/symantec/message_gateway"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://seclists.org/fulldisclosure/2017/Aug/28","label":"seclists.org/fulldisclosure/2017/Aug/28","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/42519/","label":"www.exploit-db.com/exploits/42519/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/100135","label":"www.securityfocus.com/bid/100135","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00","label":"www.symantec.com/security_response/…","hostname":"www.symantec.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6327","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6327","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-08-11T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2021-11-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"Symantec Messaging Gateway Remote Code Execution Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-05-03T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:55:35.541Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T13:11:22.454Z","stale":false,"partial":false}}