CVE-2016-8592

logquerysystem.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code as the root user via shell metacharacters in the cacheid parameter...

CVE-2016-8592

Affected product: Trend Micro Threat Discovery Appliance (TDA) versions 2.6.1062r1 and earlier. Component exposed: log_query_system.cgi. Vulnerability: remote authenticated users can inject shell metacharacters via the cache_id parameter to execute arbitrary code with root privileges. This is a p...

Trend Micro Threat Discovery Appliance <= 2.6.1062r1 (latest) log_query_system.cgi Command Injection Remote Code Execution Vulnerability Raw (CVE-2016-8592)

Summary: There exists a post authenticated command injection vulnerability that can be used to execute arbitrary code as root. Notes: - Since this is a busybox, getting a connectback seemed hard. So, for this particular PoC, all I did was exec a bind shell using netcat. - Auth is VERY weak, no...