CVE-2018-3603

Опубликовано: 09 фев. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

A CGGIServlet SQL injection remote code execution (RCE) vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.

Ссылки

https://success.trendmicro.com/solution/1119158
Patch
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-112/
Third Party Advisory
VDB Entry
https://success.trendmicro.com/solution/1119158
Patch
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-112/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04554

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-m8xm-fjq3-qx3h