CVE-2016-7552
CVE-2016-7552
Vexday Risk Score
40Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 93.2%KEV nãoPoC —Nuclei simMetasploit simPatch —
Lifecycle
10 Apr 2017Metasploit module available
12 Apr 2017Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
Affected products
n/a · n/a