CVE-2016-8593

4 known exploits for CVE-2016-8593

Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a .. (dot dot) in the dID parameter.

Affected products: Trend Micro Threat Discovery Appliance
Trendmicro Threat Discovery Appliance: ≤ 2.6.1062

Fix: Available
CVSS 3.0: 8.8 HIGH
EPSS: 7.0% (94th percentile)
Weakness: CWE-22
NVD status: Modified
Published: 2017-04-28

CVE-2016-8593 at NVD

Authoritative description, scoring and affected products

Trend Micro Threat Discovery Appliance <= 2.6.1062r1 (latest) upload.cgi Remote Code Execution Vulnerability Raw (CVE-2016-8593)

2017-04-21 RootSEEBUGPython

Trend Micro Threat Discovery Appliance 2.6.1062r1 upload.cgi Remote Code Execution

2017-04-20 mr_meZDTPython

Trend Micro Threat Discovery Appliance - Session Generation Authentication Bypass (CVE-2016-8584)

2017-04-20 RootSEEBUGRuby

Trend Micro Threat Discovery Appliance 2.6.1062r1 upload.cgi Remote Code Execution

2017-04-19 Roberto Suggi LiveraniPACKETSTORM