---
id: "CVE-2017-6327"
kind: "vulnerability"
aliases: ["CVE-2017-6327"]
title: "Symantec Symantec Messaging Gateway: Symantec Messaging Gateway Remote Code Execution Vulnerability"
severity: "critical"
cvss: 8.8
epss: 0.35911
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Symantec Symantec Messaging Gateway", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "self-hosted", "symantec-messaging-gateway", "vendor"]
not_affected_if: ["unknown"]
published_at: "2017-08-11T20:29:00+00:00"
first_seen_at: "2026-10-23T19:11:53+00:00"
updated_at: "2026-10-23T21:57:34+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6327", "first_seen_at": "2026-10-23T19:11:53+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-6327", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-6327", "first_seen_at": "2026-10-23T21:57:34+00:00"}]
---

# Symantec Symantec Messaging Gateway: Symantec Messaging Gateway Remote Code Execution Vulnerability

Symantec Messaging Gateway has an unspecified flaw that allows remote code execution. An attacker who exploits it can run commands on the appliance and may then try to escalate privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Symantec Symantec Messaging Gateway affected ? fixed ?

## Fix

Apply the updates per the vendor instructions, as CISA requires; the specific fixed version is unknown from the sources.

## Timeline

- 2026-10-23T19:11:53+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-6327
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2017-6327
- 2026-10-23T21:57:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2017-6327

## From the sources

The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely on a target machine or in a target process. In this type of occurrence, after gaining access to the system, the attacker may attempt to elevate their privileges.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_