CVE-2020-8466

2020-12-1721:05:48

trendmicro

www.cve.org

cve-2020-8466

trend micro

interscan web security

vulnerability

command injection

virtual appliance

password hashing

AI Score

9.8

Confidence

High

EPSS

0.391

Percentile

97.3%

JSON

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password.

CNA Affected

[
  {
    "product": "Trend Micro InterScan Web Security Virtual Appliance",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "6.5 SP2"
      }
    ]
  }
]