CVE-2016-8585

admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root…

published April 28, 2017

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the timezone parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07204 · 94.3th percentile
Published
2017-04-28T19:00Z
EPSS history
Timeline
  • 28 APR 19:00Z
    admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root…
    cvelistv5