CVE-2018-10350

Name: CVE-2018-10350
Creator: NVD / NIST
Published: 2018-05-25T15:29:00.257+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 15.22%

Last modified Jun 17, 2026

CVE-2018-10350 is a vulnerability of currently unknown severity. A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php. Authentication is required in order to exploit this vulnerability.. EPSS estimates a 15.22% chance of exploitation in the next 30 days.

Description

A SQL injection remote code execution vulnerability in Trend Micro Smart Protection Server (Standalone) 3.x could allow a remote attacker to execute arbitrary code on vulnerable installations due to a flaw within the handling of parameters provided to wcs\_bwlists\_handler.php. Authentication is required in order to exploit this vulnerability.

Metrics

EPSS Probability

15.22%

96.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-89

Affected Software

Vendor	Product	Versions
Trendmicro	Smart Protection Server	3.0
Trendmicro	Smart Protection Server	3.1
Trendmicro	Smart Protection Server	3.2
Trendmicro	Smart Protection Server	3.3

References

https://success.trendmicro.com/solution/1119715Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-421/Third Party Advisory, VDB Entry
https://success.trendmicro.com/solution/1119715Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-18-421/Third Party Advisory, VDB Entry

Timeline

Published: May 25, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-10350?

How severe is CVE-2018-10350?

Severity scoring for CVE-2018-10350 is pending analysis. The EPSS model estimates a 15.22% probability of exploitation in the next 30 days.

How do I fix CVE-2018-10350?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-10350?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST