CVE-2020-28578: Buffer Overflow

Published Nov 18, 2020

Updated

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.

Affected Software

1 affected component

trendmicro Interscan Web Security Virtual Appliance=6.5-sp2

Event History

Nov 18, 2020

CVE Published

via MITRE·06:45 PM

Data Sourced

via MITRE·06:45 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-28578?

CVE-2020-28578 is a vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 that could allow an unauthenticated, remote attacker to achieve remote code execution with elevated privileges.

How severe is CVE-2020-28578?

CVE-2020-28578 has a severity rating of 9.8, classified as critical.

How can an attacker exploit CVE-2020-28578?

An attacker can exploit CVE-2020-28578 by sending a specially crafted HTTP message to the vulnerable system.

Is there a fix for CVE-2020-28578?

Yes, Trend Micro has released a security bulletin that provides information and patches for addressing the vulnerability.

Where can I find more information about CVE-2020-28578?

You can find more information about CVE-2020-28578 on the Trend Micro and Tenable websites.