CVE-2024-23615

CRITICAL

Symantec Messaging Gateway Buffer Overflow

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-23615 has a selected CVSS score of 10.0 (critical).

Description

A buffer overflow vulnerability exists in Symantec Messaging Gateway versions 10.5 and before. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as root.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated May 8, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Messaging Gateway

Browse Symantec / Messaging Gateway

Default status: unaffected

CVE ListThrough 10.5affected

References

2