Trend Micro Control Manager CmdProcessor.exe Remote Buffer Overflow (uncredentialed check)

The Trend Micro Control Manager running on the remote host is missing Critical Patch 1613. As such, the included CmdProcessor.exe component is affected by a remote stack buffer overflow vulnerability in the ‘CGenericScheduler::AddTask’ function of cmdHandlerRedAlertController.dll. By sending a specially crafted IPC packet to the service, which listens by default on TCP port 20101, an unauthenticated, remote attacker could leverage this issue to execute arbitrary code in the context of the user under which the service runs, which is SYSTEM by default.

Note that this script tries to kill the CmdProessor.exe process, but it will restart if it dies.