Trend Micro IWSVA Remote Code Execution (CVE-2020-8466)

A remote code execution vulnerability exists in Trend Micro IWSVA. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2020-8466

creationtimestamp| type| source ---|---|--- 2020-12-18 00:43:04+00:00| seen| https://t.me/cibsecurity/21022 2020-12-18 11:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2317 2024-11-14 06:07:20+00:00| seen| MISP/061dad3b-6613-42ab-a543-3c6bb76345cf...

CVE-2020-8466

A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password...

CVE-2020-8466

Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 is affected by a command injection vulnerability (CVE-2020-8466) in which an unauthenticated attacker could execute commands by supplying a manipulated password. Root cause involves the password handling path enabling arbitrary ...