CVE-2020-8466

CVE-2020-8466: falha em Trend Micro InterScan Web Security Virtual…

Publicada em · Atualizada em

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 64%
probabilidade de exploração
64%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password.
Produtos afetados
Trend Micro · Trend Micro InterScan Web Security Virtual Appliance
CVEs relacionadas — Trend Micro InterScan Web Security Virtual…

No mesmo produto, das mais perigosas para as menos.

CVE-2020-8604—CVE-2020-8604EPSS 89.8%CVE-2020-8605—CVE-2020-8605EPSS 87.8%CVE-2020-28578—CVE-2020-28578EPSS 73.0%CVE-2020-8606—CVE-2020-8606EPSS 72.7%CVE-2020-28579—CVE-2020-28579EPSS 50.7%CVE-2020-28581—CVE-2020-28581EPSS 45.0%
Referências
https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/https://success.trendmicro.com/solution/000283077