Login Request a demo
Unscored severity · published Sep 28, 2012
CVE-2012-2998
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute…
–
CVSS
6.1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.1% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Control Manager · Trend Micro
through 5.5; 2.0; 2.1; 2.5; 3.0; 3.0; +6 more · source: NVD
Affected product
CM
Control Manager
Trend Micro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2998
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2998
Vendor Advisory
http://esupport.trendmicro.com/solution/en-us/1061043.aspx
Patch
http://jvn.jp/en/jp/JVN42014489/index.html
Patch
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000090
US Government Resource
http://www.kb.cert.org/vuls/id/950795
www.securitytracker.com
http://www.securitytracker.com/id?1027584
Patch
http://www.spentera.com/2012/09/trend-micro-control-manager-sql-injection-vulnerability/
More from Control Manager
–
CVE-2011-5001
Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613…
–
CVE-2007-0851
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows…
–
CVE-2006-3261
Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the…
–
CVE-2005-0383
Trend Micro Control Manager 3.0 Enterprise Edition allows remote attackers to gain privileges via a replay attack of the encrypted username and password
–
CVE-2005-0533
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a…