CVE-2016-8586

CVE-2016-8586 affects Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier. The vulnerability is in the detected_potential_files.cgi component, where shell metacharacters in the cache_id parameter allow a remote authenticated user to execute arbitrary code as root. The provided documents...

CVE-2016-8586

detectedpotentialfiles.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...

Trend Micro Threat Discovery Appliance <= 2.6.1062r1 detected_potential_files.cgi Command Injection Remote Code Execution Vulnerability (CVE-2016-8586)

Summary: There exists a post authenticated command injection vulnerability that can be used to execute arbitrary code as root. Notes: - Since this is a busybox, getting a connectback seemed hard. So, for this particular PoC, all I did was exec a bind shell using netcat. - Auth is VERY weak, no...