CVE-2006-5268 — Improper Authentication in Micro Serverprotect

CWE-287 — Improper Authentication3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
18.3%
top 4.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Trend Micro Serverprotect
Timeline
PublishedNov 17
Latest updateMay 1

Description

Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to obtaining "administrative access to the RPC interface."

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDtrend_micro/serverprotect5.58, 5.7+1

🔴Vulnerability Details

2
GHSA
GHSA-2x9c-w7rx-h8qj: Unspecified vulnerability in Trend Micro ServerProtect 5↗2022-05-01
▶
CVEList
CVE-2006-5268: Unspecified vulnerability in Trend Micro ServerProtect 5↗2008-11-17
▶
CVE-2006-5268 — Improper Authentication in Trend | cvebase