CVE-2016-2204

High

Published: 22/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The management console on Symantec Messaging Gateway (SMG) Appliance devices before version 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system, posing a serious threat to data security and system integrity.

Recommendation

It is recommended to update devices to version 10.6.1 or later to mitigate this vulnerability.

Other vulnerabilities in Symantec Messaging Gateway (SMG) Appliance

CVE-2016-2203High
The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to discover an encrypted AD password by leveraging certain read privileges.

Original NVD description (English source)

The management console on Symantec Messaging Gateway (SMG) Appliance devices before 10.6.1 allows local users to obtain root-shell access via crafted terminal-window input.