CVE-2017-13677

Published: Apr 11, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTTPS requests to cause denial-of-service through management console application crashes.

Affected (5)

Products: Broadcom: Advanced Secure Gateway, Symantec Proxysg

Broadcom

2 products

Advanced Secure Gateway

Symantec Proxysg

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Broadcom Advanced Secure Gateway	From 6.6 to 6.6.5.14
Broadcom Advanced Secure Gateway	From 6.7 to 6.7.3.1

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Broadcom Symantec Proxysg	From 6.5 to 6.5.10.8
Broadcom Symantec Proxysg	From 6.6 to 6.6.5.14
Broadcom Symantec Proxysg	From 6.7 to 6.7.3.1

References (6)

http://www.securityfocus.com/bid/103685

Source: secure@symantec.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040757

Source: secure@symantec.com

Third Party AdvisoryVDB Entry

https://www.symantec.com/security-center/network-protection-security-advisories/SA162

Source: secure@symantec.com

Vendor Advisory

http://www.securityfocus.com/bid/103685

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040757

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.symantec.com/security-center/network-protection-security-advisories/SA162

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.