PT-2018-17421 · Trend Micro · Trend Micro Email Encryption Gateway

Published 2018-03-15 · Updated 2020-08-24 · CVE-2018-6223

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Email Encryption Gateway version 5.5

Description A missing authentication for appliance registration issue allows an attacker to manipulate the registration process to reset configuration parameters.

Recommendations For Trend Micro Email Encryption Gateway version 5.5, apply the necessary patch or update to include proper authentication for the appliance registration process.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2018-6223

ZDI-18-412

Affected Products

Trend Micro Email Encryption Gateway

References · 6

• 🔥 https://coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/44166 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-18-412 · Security Note
• https://success.trendmicro.com/solution/1119349 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-6223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6223 · Security Note