high8.8Public exploit code
CVE-2020-8605
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 - Remote Code Execution (Metasploit)2020-07-14 · webapps · multiple
Impact
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Interscan Web Security Virtual Appliance | Version 6.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/158171/Trend-Micro-Web-Security-Virtual-Appliance-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/158423/Trend-Micro-Web-Security-Remote-Code-Execution.html
- https://success.trendmicro.com/solution/000253095
- https://www.zerodayinitiative.com/advisories/ZDI-20-676/
- http://packetstormsecurity.com/files/158171/Trend-Micro-Web-Security-Virtual-Appliance-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/158423/Trend-Micro-Web-Security-Remote-Code-Execution.html
- https://success.trendmicro.com/solution/000253095
- https://www.zerodayinitiative.com/advisories/ZDI-20-676/