critical9.8Public exploit code
CVE-2018-6220
An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities2018-02-22 · webapps · jsp · Verified
Impact
An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Email Encryption Gateway | Version 5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://success.trendmicro.com/solution/1119349
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44166/
- https://success.trendmicro.com/solution/1119349
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44166/