CVE-2016-9269

EPSS 6.85%
Veröffentlicht 21.02.2017 07:59:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to run arbitrary commands on the system as root via Patch Update functionality. This was resolved in Version 6.5 CP 1737.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trendmicro ≫ Interscan Web Security Virtual Appliance Version <= 6.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	6.85%	0.904

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.9	3.1	6	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov	9	8	10	AV:N/AC:L/Au:S/C:C/I:C/A:C

http://www.securityfocus.com/bid/96252

http://www.securitytracker.com/id/1037849

https://success.trendmicro.com/solution/1116672

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2016-9269

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-9269

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-9269

EUVD