A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HTrendmicro Threat Discovery Appliance
APPTrendmicro2.6.1062
π΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2016-8584CRITICAL9.8ten sam produkt
Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows re...
CVE-2016-7552CRITICAL9.8ten sam produkt
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id coo...
CVE-2016-8586HIGH8.8ten sam produkt
detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote au...
CVE-2016-8587HIGH7.3ten sam produkt
dlp_policy_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authentic...
CVE-2016-8585HIGH8.8ten sam produkt
admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticate...