CVE-2020-28579: Buffer Overflow

Published Nov 18, 2020

Updated

A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.

Affected Software

1 affected component

trendmicro Interscan Web Security Virtual Appliance=6.5-sp2

Event History

Nov 18, 2020

CVE Published

via MITRE·06:45 PM

Data Sourced

via MITRE·06:45 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID of this vulnerability is CVE-2020-28579.

What is the severity rating of CVE-2020-28579?

The severity rating of CVE-2020-28579 is high.

What is the affected software of CVE-2020-28579?

The affected software of CVE-2020-28579 is Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2.

How can an authenticated, remote attacker exploit CVE-2020-28579?

An authenticated, remote attacker can exploit CVE-2020-28579 by sending a specially crafted HTTP message to achieve remote code execution with elevated privileges.

Are there any references available for CVE-2020-28579?

Yes, you can find references for CVE-2020-28579 at the following URLs: [Reference 1](https://success.trendmicro.com/solution/000281954) and [Reference 2](https://www.tenable.com/security/research/tra-2020-63).