Main
Vulnerability Database
Exploits
ID:1751 - Exploit for Security restrictions bypass in Threat Discovery Appliance - CVE-2016-7552
ID:1751 - Exploit for Security restrictions bypass in Threat Discovery Appliance - CVE-2016-7552
Published: March 18, 2020
Vulnerability identifier: #VU7991
Vulnerability risk: Medium
CVE-ID: CVE-2016-7552
CWE-ID: CWE-22
Exploitation vector: Remote access
Vulnerable software:
Threat Discovery Appliance
Threat Discovery Appliance
Link to public exploit:
https://www.rapid7.com/db/modules/exploit/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi
Vulnerability description
The vulnerability allows a remote attacker to conduct a directory traversal attack on the target system.
The weakness exists in the logoff.cgi script due to improper processing of a session_id cookie. A remote attacker can send specially crafted data, delete arbitrary files in the logoff.cgi script, reset the administrator password to 'admin' if the system is rebooted and bypass authentication restrictions or cause DoS condition.
Successful exploitation of the vulnerability may result in system crash.
The weakness exists in the logoff.cgi script due to improper processing of a session_id cookie. A remote attacker can send specially crafted data, delete arbitrary files in the logoff.cgi script, reset the administrator password to 'admin' if the system is rebooted and bypass authentication restrictions or cause DoS condition.
Successful exploitation of the vulnerability may result in system crash.
Remediation
Install update from vendor's website.