CVE-2017-13677: Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management...

Security readout for executives and security teams

CVE-2017-13677 is a denial-of-service flaw in Symantec ASG and ProxySG management consoles. A remote attacker who can reach the console can send crafted HTTP or HTTPS requests that crash the management console application. The sources do not provide CVSS severity or evidence of active exploitation. Exposure is most likely where affected ASG or ProxySG management consoles are reachable over HTTP or HTTPS by untrusted users or broad internal networks. Appliances with management interfaces restricted to trusted administration paths have lower practical exposure, though the source bundle does not quantify likelihood. Prioritize remediation for appliances whose management consoles are broadly reachable or operationally critical. The known impact is service disruption to management access, not data theft or code execution, but console crashes can impair incident response and administration. Mitigation focus: Upgrade ASG 6.6 to 6.6.5.14 or later, per affected-version boundaries.; Upgrade ASG 6.7 to 6.7.3.1 or later.; Upgrade ProxySG to 6.5.10.8, 6.6.5.14, 6.7.3.1, or later as applicable..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.