CVE-2020-8605

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected installations. Authentication is required to exploit this vulnerability.

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

87.76% chance of exploitation in the next 30 days, 100th percentile

Published

2020-05-27

Updated

2024-08-04

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/158171/Trend-Micro-Web-Security-Virtual-Appliance-Re…
• http://packetstormsecurity.com/files/158423/Trend-Micro-Web-Security-Remote-Code-Executio…

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trendmicro_websecurit…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48667

References

• CVE Record
• NVD entry

Related

• CVE-2020-8604
• CVE-2020-8606
• CVE-2020-8597
• CVE-2020-8615
• CVE-2020-8559
• CVE-2020-8617