{"schema":"threatline.record/2","record":{"id":"CVE-2017-6327","aliases":[],"summary":"Symantec Messaging Gateway Remote Code Execution Vulnerability","details":"Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions.","categories":["Network & edge"],"product":"Symantec Messaging Gateway","vendor":"Symantec","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2017-6327","source_modified_at":"2025-10-21T23:55:35.541Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Messaging Gateway","vendor":"Symantec Corporation","versions":[{"status":"affected","version":"All versions prior to version 10.6.3-267"}],"defaultStatus":null}],"fixed_versions":[],"cvss":8.8,"severity":"High","kev":{"listed":true,"date_added":"2021-11-03","due_date":"2022-05-03","required_action":"Apply updates per vendor instructions.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.35911,"percentile":0.98471,"score_date":"2026-10-23"},"published_at":"2017-08-11T20:00:00.000Z","modified_at":"2025-10-21T23:55:35.541Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2017-6327","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-21T23:55:35.541Z"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/42519","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2017-08-18"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2017-6327","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Exploit-DB","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-6327","source":"CISA KEV"},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/42519/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"source":"CVE List","url":"https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170810_00","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6327","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2025-02-07T13:16:24.950539Z"},"exploits":[{"source":"Exploit-DB","kind":"Webapps exploit","name":"Symantec Messaging Gateway 10.6.3-2 - Root Remote Command Execution","url":"https://www.exploit-db.com/exploits/42519","date":"2017-08-18","added":"2017-08-18","verified":true}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-21T23:55:35.541Z","content_hash":"f64e28dc36dc3593c495bfe6d6c7654ef85c1f3e05414cc0ee58d91fc58a8f05"}}