HTTP: Trend Micro Threat Discovery Appliance Remote Command Execution
This signature detects attempts to exploit a known vulnerability against admin_sys_time.cgi script of Trend Micro Threat Discovery Appliancee. A remote authenticated attacker may exploit this vulnerability by sending a crafted request to the vulnerable CGI script. Successful exploitation could lead to arbitrary command injection.
Extended Description
A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.
Affected Products
Trendmicro threat_discovery_appliance
Short Name
HTTP:MISC:TM-TDA-RCE
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Appliance CVE-2016-7547 Command Discovery Execution Micro Remote Threat Trend bid:97610
Release Date
09/28/2017
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3337
False Positive
Unknown
Vendors
Trendmicro
CVSS Score
7.5