PT-2018-17417 · Trend Micro · Trend Micro Email Encryption Gateway

Leandro Barragan + 1 · Published 2018-03-15 · Updated 2018-04-04 · CVE-2018-6219

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5

Description The issue allows an attacker to eavesdrop and tamper with certain types of update data due to an insecure update via HTTP.

Recommendations For version 5.5, consider updating to a newer version that uses secure update protocols to prevent eavesdropping and tampering. As a temporary workaround, restrict access to update mechanisms to minimize the risk of exploitation.

Exploit

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2018-6219

Affected Products

Trend Micro Email Encryption Gateway

References · 5

• 🔥 https://coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/44166 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6219 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6219 · Vendor Advisory
• https://success.trendmicro.com/solution/1119349 · Vendor Advisory