High severity · published Jun 30, 2016
CVE-2016-5840
hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell…
7.2
CVSS
7.8%
EPSS
No
On KEV
Description
hotfix_upload.cgi in Trend Micro Deep Discovery Inspector (DDI) 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82) allows remote administrators to execute arbitrary code via shell metacharacters in the filename parameter of the Content-Disposition header.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DD
Deep Discovery Inspector · Trend Micro
3.7; 3.81; 3.82 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5840
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5840
Vendor Advisory
http://esupport.trendmicro.com/solution/en-US/1114281.aspx
jvn.jp
http://jvn.jp/en/jp/JVN55428526/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000103.html
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-16-373
Exploit
https://www.exploit-db.com/exploits/40180/