CVE-2016-6267

high-risk
Published 2017-01-30

SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3) spare_AllowGroupNetmask parameter to admin_notification.php.

Do I need to act?

!
72.5% chance of exploitation in next 30 days
EPSS score — higher than 27% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (3)

Affected Vendors

Trendmicro

References (4)

Exploit https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/
Mitigation https://success.trendmicro.com/solution/1114913
Exploit https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/
Mitigation https://success.trendmicro.com/solution/1114913
58
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 19/34 · Moderate
Exposure 9/34 · Low