Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2016-6267: Trend Micro Smart Protection Server lets signed-in users run commands

CVE-2016-6267 · published 9 years ago

Summary

Versions of Trend Micro Smart Protection Server before the latest builds let a user who can log in remotely add special characters to certain settings in the admin_notification page, causing the server to execute any command the user chooses. This could let an attacker take control of the server or access sensitive information. Install the newest updates or apply the vendor’s patch as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
trendmicro	smart_protection_server	2.5 2.6 3.0 `cpe:2.3:a:trendmicro:smart_protection_server:2.5:::::::*`

Original advisory text

SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3) spare_AllowGroupNetmask parameter to admin_notification.php.

References

https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/ Exploit Technical Description Third Party Advisory
https://success.trendmicro.com/solution/1114913 Mitigation Patch Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Exploitation

55% chance of attack within 30 days

Type

CWE-20Improper Input Validation

Timeline

Published30 Jan 2017

Updated29 Sep 2026

First seen29 Sep 2026

Sources

CVE-2016-6267 · NVD

Track software like this

Free during beta