CVE-2016-7547

EPSS 92.7%

Vexday Risk Score

40Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 92.7%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

10 Apr 2017Metasploit module available

12 Apr 2017Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.

Affected products

n/a · n/a

References

https://github.com/rapid7/metasploit-framework/pull/8216/commits/0f07875a2ddb0bfbb4e985ab074e9fc56da1dcf6 http://www.securityfocus.com/bid/97610