CVE-2020-8606
critical · 9.8A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected installations of Trend Micro InterScan Web Security Virtual Appliance.
9.8
CVSS
72.7%
EPSS (exploit prob.)
99th
EPSS percentile
2020-05-27
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| trendmicro | interscan_web_security_virtual_appliance | 6.5 |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/158171/Trend-Micro-Web-Security-Virtual-Appliance-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/158423/Trend-Micro-Web-Security-Remote-Code-Execution.html
- https://success.trendmicro.com/solution/000253095
- https://www.zerodayinitiative.com/advisories/ZDI-20-677/
- http://packetstormsecurity.com/files/158171/Trend-Micro-Web-Security-Virtual-Appliance-Remote-Code-Execution.html
- http://packetstormsecurity.com/files/158423/Trend-Micro-Web-Security-Remote-Code-Execution.html
- https://success.trendmicro.com/solution/000253095
- https://www.zerodayinitiative.com/advisories/ZDI-20-677/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2020-8606