Vulnerability Details : CVE-2016-7547

Public exploit exists!
A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.
Published 2017-04-12 10:59:00
Updated 2017-04-17 15:44:09
Source MITRE
View at NVD,   CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2016-7547

EPSS FAQ
11.09%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2016-7547

  • Trend Micro Threat Discovery Appliance admin_sys_time.cgi Remote Command Execution
    Disclosure Date: 2017-04-10
    First seen: 2020-04-26
    exploit/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi
    This module exploits two vulnerabilities the Trend Micro Threat Discovery Appliance. The first is an authentication bypass vulnerability via a file delete in logoff.cgi which resets the admin password back to 'admin' upon a reboot (CVE-2016-7552). The second

CVSS scores for CVE-2016-7547

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
7.5
 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
 NIST
9.8
 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.9
5.9
 NIST

CWE ids for CVE-2016-7547

  • Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-7547

Products affected by CVE-2016-7547

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close