Lucene search
IcscertCVE-2012-3022HistoryApr 16, 2013 - 2:04 p.m.
CVE-2012-3022
2013-04-1614:04:30
CWE-264
icscert
web.nvd.nist.gov
32
cve-2012-3022
trendlink
canary labs
activex control
security vulnerability
remote code execution
nvd
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.1
Confidence
High
EPSS
0.002
Percentile
55.9%
The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted web site.
Affected configurations
Node
canarylabstrendlinkRange≤9.0.2.27051
| Vendor | Product | Version | CPE |
|---|---|---|---|
| canarylabs | trendlink | * | cpe:2.3:a:canarylabs:trendlink:*:*:*:*:*:*:*:* |
Related
jvn
jvn
cvelist
cvelist
CVE-2012-3022
2013-04-16 10:00:00
ics
ics
Canary Labs Inc Trend Link Insecure ActiveX Control Method
2013-04-30 12:00:00
prion
prion
Code injection
2013-04-16 14:04:00
nvd
nvd
CVE-2012-3022
2013-04-16 14:04:30
CVSS2
8.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
AI Score
7.1
Confidence
High
EPSS
0.002
Percentile
55.9%
Related for CVE-2012-3022