1. Home
  2. CVE Database
  3. CVE-2016-8592
HIGH · 8.8

CVE-2016-8592

log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cache...

Vulnerability Description

log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cache_id parameter.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TrendmicroThreat Discovery Appliance<= 2.6.1062

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2016-8592?

CVE-2016-8592 is a vulnerability with a CVSS score of 8.8 (HIGH). log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cache...

How severe is CVE-2016-8592?

CVE-2016-8592 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-8592?

Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Threat Discovery Appliance.