CVE-2016-9097: The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 pr...

Security readout for executives and security teams

This flaw lets a read-only administrator in affected Symantec ASG or ProxySG management consoles reach functions that should require write privileges. The main business risk is unauthorized configuration change by an insider or by an attacker who has compromised a limited admin account. Exposure is limited to organizations running the named Symantec ASG or ProxySG versions and granting read-only management-console accounts. Risk increases if the management console is reachable from broad internal networks or if admin credentials are shared, stale, or weakly protected. Prioritize remediation where these appliances protect sensitive egress, enforce security policy, or are administered by multiple teams. The issue is not reported as actively exploited, but a compromised read-only admin account could become a path to unauthorized security-control changes. Mitigation focus: Upgrade ASG 6.6 to version 6.6.5.8 or later.; Upgrade ProxySG 6.5 to version 6.5.10.6 or later.; Upgrade ProxySG 6.6 to version 6.6.5.8 or later..

Prepared

Jun 13, 2026, 05:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.