CVE-2016-7552
CRITICAL NUCLEITrend Micro Threat Discovery Appliance 2.6.1062r1 - Path Traversal & File Deletion via Session ID
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-7552.
PoCs published by mr_me <[email protected]>, Roberto Suggi Liverani @malerisch, including Metasploit module exploits/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits CVE-2016-7552 (authentication bypass) and CVE-2016-7547 (command injection) in Trend Micro Threat Discovery Appliance. It resets the admin password via a file deletion vulnerability and then injects commands through the timezone parameter in admin_sys_time.cgi.
Description
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
Exploits (1)
This Metasploit module exploits CVE-2016-7552 (authentication bypass) and CVE-2016-7547 (command injection) in Trend Micro Threat Discovery Appliance. It resets the admin password via a file deletion vulnerability and then injects commands through the timezone parameter in admin_sys_time.cgi.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H