CVE-2016-9269 Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated,....
CriticalCVSS 9.9
EPSS 13.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to run arbitrary commands on the system as root via Patch Update functionality. This was resolved in Version 6.5 CP 1737.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro interscan web security virtual appliance | <= 6.5 | No fix listed |
References
- 96252 vdb-entry
- 1037849 vdb-entry
- success.trendmicro.com patch vendor-advisory