CVE-2016-7547

CRITICAL

Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution

Title source: metasploit

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-7547. PoCs published by mr_me <[email protected]>, Roberto Suggi Liverani @malerisch, including Metasploit module exploits/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi.

AI-analyzed exploit summary This Metasploit module exploits CVE-2016-7547, a command injection vulnerability in Trend Micro Threat Discovery Appliance's admin_sys_time.cgi, and optionally leverages CVE-2016-7552 for authentication bypass. It achieves remote code execution by injecting commands via the timezone parameter.

Description

A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.

Exploits (1)

metasploit WORKING POC EXCELLENT

by mr_me <[email protected]>, Roberto Suggi Liverani @malerisch · rubypoclinux

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi.rb

View Code ZIP pw:eip

This Metasploit module exploits CVE-2016-7547, a command injection vulnerability in Trend Micro Threat Discovery Appliance's admin_sys_time.cgi, and optionally leverages CVE-2016-7552 for authentication bypass. It achieves remote code execution by injecting commands via the timezone parameter.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Trend Micro Threat Discovery Appliance 2.6.1062r1

No auth needed

Prerequisites: Network access to the target appliance · Optional: Ability to trigger a reboot if using authentication bypass

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution T1078 - Valid Accounts

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/97610

Exploit, Third Party Advisory x_refsource_misc

https://github.com/rapid7/metasploit-framework/pull/8216/commits/0f07875a2ddb0bfbb4e985ab074e9fc56da1dcf6

Scores

CVSS v3 9.8

EPSS 0.9272

EPSS Percentile 99.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-361

Status published

Products (1)

trendmicro/threat_discovery_appliance 2.6.1062 r1

Published Apr 12, 2017

Tracked Since Feb 18, 2026