CVE-2016-6267
Last modified
CVE-2016-6267 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3) spare_AllowGroupNetmask parameter to admin_notification.php.. EPSS estimates a 54.87% chance of exploitation in the next 30 days.
Description
SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3) spare_AllowGroupNetmask parameter to admin_notification.php.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Smart Protection Server | 2.5 |
| Trendmicro | Smart Protection Server | 2.6 |
| Trendmicro | Smart Protection Server | 3.0 |
References
- https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/Exploit, Technical Description, Third Party Advisory
- https://success.trendmicro.com/solution/1114913Mitigation, Patch, Vendor Advisory
- https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/Exploit, Technical Description, Third Party Advisory
- https://success.trendmicro.com/solution/1114913Mitigation, Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-6267?
How severe is CVE-2016-6267?
How do I fix CVE-2016-6267?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-6261The idna_to_ascii_4i function in lib/idna.c in libidn before…
- CVE-2016-6262idn in libidn before 1.33 might allow remote attackers to ob…
- CVE-2016-6263The stringprep_utf8_nfkc_normalize function in lib/nfkc.c in…
- CVE-2016-6264Integer signedness error in libc/string/arm/memset.S in uCli…7.5
- CVE-2016-6265Use-after-free vulnerability in the pdf_load_xref function i…
- CVE-2016-6266ccca_ajaxhandler.php in Trend Micro Smart Protection Server …8.8
- CVE-2016-6268Trend Micro Smart Protection Server 2.5 before build 2200, 2…7.8
- CVE-2016-6269Multiple directory traversal vulnerabilities in Trend Micro …9.1
- CVE-2016-6270The handle_certificate function in /vmi/manager/engine/manag…8.8
- CVE-2016-6271The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows m…
- CVE-2016-6272XPath injection vulnerability in Epic MyChart allows remote …
- CVE-2016-6273The lmadmin component in Flexera FlexNet Publisher (aka Flex…
Are you affected by CVE-2016-6267?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST