CVE-2016-6266
HighSummary
In ccca_ajaxhandler.php in Trend Micro Smart Protection Server before version 2.5 build 2200, 2.6 build 2106, and 3.0 build 1330, remote authenticated users can execute arbitrary commands via shell metacharacters in the host or apikey parameters in a register action, enable parameter in a save_stting action, or host or apikey parameters in a test_connection action.
Risk Assessment
This vulnerability may lead to unauthorized command execution on the server, posing a serious threat to the integrity and confidentiality of the system.
Recommendation
It is recommended to update Trend Micro Smart Protection Server to the latest version to mitigate this vulnerability and restrict access to administrative functions to trusted users.
Other vulnerabilities in Trend Micro Smart Protection Server
See all- CVE-2016-6268High
Trend Micro Smart Protection Server versions 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow local web server users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory.
- CVE-2016-6267High
SnmpUtils in Trend Micro Smart Protection Server before specified builds allows remote authenticated users to execute arbitrary commands via shell metacharacters in the admin_notification.php parameters.
Original NVD description (English source)
ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) host or (2) apikey parameter in a register action, (3) enable parameter in a save_stting action, or (4) host or (5) apikey parameter in a test_connection action.