CVE-2018-3606

XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable installations.
References
Link Resource
https://www.zerodayinitiative.com/advisories/ZDI-18-110/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-108/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-107/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-106/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-105/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-104/ VDB Entry Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-103/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-101/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-100/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-099/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-093/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-092/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-091/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-089/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-086/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-085/ Third Party Advisory VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-18-083/ Third Party Advisory VDB Entry
https://success.trendmicro.com/solution/1119158 Patch Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:*

Information

Published : 2018-02-09 10:29

Updated : 2018-02-27 07:40


NVD link : CVE-2018-3606

Mitre link : CVE-2018-3606

Products Affected
CWE