CVE-2017-6326
CriticalSummary
The Symantec Messaging Gateway can encounter an issue of remote code execution, allowing commands to be executed remotely on a target machine or in a target process.
Risk Assessment
An attacker may gain full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update the Symantec Messaging Gateway to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Symantec Messaging Gateway
See all- CVE-2017-6328High
The Symantec Messaging Gateway before version 10.6.3-267 is vulnerable to a cross site request forgery (CSRF) attack, which allows unauthorized commands to be transmitted from a user's trusted browser.
- CVE-2017-6324High
The Symantec Messaging Gateway can process a corrupted Word file with potentially malicious macros despite the administrator having the 'disarm' functionality enabled. This constitutes a bypass of the application's disarm functionality.
Original NVD description (English source)
The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process.