PT-2018-16089 · Trend Micro · Trend Micro Control Manager

Mr_Me

+1

·

Published

2018-01-10

·

Updated

2018-03-01

·

CVE-2018-3605

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Control Manager version 6.0
Description The issue is related to SQL injection remote code execution (RCE) vulnerabilities in various methods of Trend Micro Control Manager. These vulnerabilities could allow a remote attacker to execute arbitrary code on vulnerable installations. The affected methods include TopXXX, ViolationXXX, and IncidentXXX, among others.
Recommendations For Trend Micro Control Manager version 6.0, consider disabling the affected methods, such as TopXXX, ViolationXXX, and IncidentXXX, until a patch is available. Restrict access to the vulnerable SQL injection endpoints to minimize the risk of exploitation. Avoid using vulnerable parameters or variables in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2018-3605
ZDI-18-069
ZDI-18-070
ZDI-18-071
ZDI-18-072
ZDI-18-073
ZDI-18-074
ZDI-18-075
ZDI-18-076
ZDI-18-077
ZDI-18-078
ZDI-18-079
ZDI-18-080
ZDI-18-081
ZDI-18-082
ZDI-18-087
ZDI-18-098

Affected Products

Trend Micro Control Manager