CVE Catalog

CVE-2016-7547

Critical
Published: Translated: NVD NIST

Summary

A command execution flaw exists in the Trend Micro Threat Discovery Appliance 2.6.1062r1 with the timezone parameter in the admin_sys_time.cgi interface.

Risk Assessment

This vulnerability may allow an attacker to execute commands remotely, potentially leading to device takeover.

Recommendation

It is recommended to update the software to the latest version and monitor access to the admin_sys_time.cgi interface.

Original NVD description (English source)

A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS