CVE-2018-3605: falha em Trend Micro Control Manager
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 20%
TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
Produtos afetados
Trend Micro · Trend Micro Control ManagerCVEs relacionadas — Trend Micro Control Manager
No mesmo produto, das mais perigosas para as menos.
Referências
https://success.trendmicro.com/solution/1119158https://www.zerodayinitiative.com/advisories/ZDI-18-069/https://www.zerodayinitiative.com/advisories/ZDI-18-070/https://www.zerodayinitiative.com/advisories/ZDI-18-071/https://www.zerodayinitiative.com/advisories/ZDI-18-072/https://www.zerodayinitiative.com/advisories/ZDI-18-073/https://www.zerodayinitiative.com/advisories/ZDI-18-074/https://www.zerodayinitiative.com/advisories/ZDI-18-075/https://www.zerodayinitiative.com/advisories/ZDI-18-076/https://www.zerodayinitiative.com/advisories/ZDI-18-077/https://www.zerodayinitiative.com/advisories/ZDI-18-078/https://www.zerodayinitiative.com/advisories/ZDI-18-079/