CVE-2016-6268

Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root privileges via a Trojan horse .war file in the Solr webapps directory.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.98% chance of exploitation in the next 30 days, 60th percentile

Published

2017-01-30

Updated

2024-08-06

Proof-of-concept exploits (1)

• https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/

References

• CVE Record
• NVD entry

Related

• CVE-2016-6267
• CVE-2016-6269
• CVE-2016-6266
• CVE-2016-6270
• CVE-2016-6256
• CVE-2016-6271