CVE-2016-8587: High severity trend micro threat discovery appliance vulnerability
dlppolicyupload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via an archive file containing a symlink to /engptnstores/prod/sensorSDK/data/ or /engptnstores/prod/sensorSDK/backuppol/.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8587?
CVE-2016-8587 has been classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2016-8587?
To fix CVE-2016-8587, upgrade to a version of Trend Micro Threat Discovery Appliance later than 2.6.1062r1.
Who is affected by CVE-2016-8587?
CVE-2016-8587 affects authenticated users of Trend Micro Threat Discovery Appliance version 2.6.1062r1 and earlier.
What type of vulnerability is CVE-2016-8587?
CVE-2016-8587 is a remote code execution vulnerability.
What can attackers do with CVE-2016-8587?
Attackers can execute arbitrary code on the system by exploiting CVE-2016-8587 through specially crafted archive files.