Symantec Messaging Gateway

symantec_messaging_gateway

Vendor: Broadcom • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-23615 1Broadcom 1Symantec Messaging Gateway Jun 17, 2026 Jan 26, 2024 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
CVE-2024-23614 1Broadcom 1Symantec Messaging Gateway Jun 17, 2026 Jan 26, 2024 N/A· v4 9.8 CRITICAL· v3 9.4 HIGH· v2 A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 9.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.
CVE-2021-30651 1Broadcom 1Symantec Messaging Gateway Jun 17, 2026 Jun 24, 2022 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 A malicious authenticated SMG administrator user can obtain passwords for external LDAP/Active Directory servers that they might not otherwise be authorized to access.
CVE-2020-12595 1Broadcom 1Symantec Messaging Gateway Jun 17, 2026 Dec 10, 2020 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior t...Show more An information disclosure flaw allows a malicious, authenticated, privileged web UI user to obtain a password for a remote SCP backup server that they might not otherwise be authorized to access. This affects SMG prior to 10.7.4.Show less
CVE-2020-12594 1Broadcom 1Symantec Messaging Gateway Jun 17, 2026 Dec 10, 2020 N/A· v4 7.2 HIGH· v3 9.0 HIGH· v2 A privilege escalation flaw allows a malicious, authenticated, privileged CLI user to escalate their privileges on the system and gain full control over the SMG appliance. This affects SMG prior to 10.7.4.
CVE-2014-0160 13Broadcom CanonicalDebian+10 more 28Application Processing Engine Firmware Cp 1543 1 FirmwareDebian Linux+25 more Apr 21, 2026 Apr 7, 2014 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted pa...Show more The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.Show less