CVE-2015-2873

CWE-4253 documents3 sources
Severity
5.5MEDIUM
EPSS
2.5%
top 14.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Trendmicro Deep Discovery Inspector
Timeline
PublishedAug 23
Latest updateMay 13

Description

Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x before 3.7.1248, 3.8.x before 3.8.1263, and other versions allows remote attackers to obtain sensitive information or change the configuration via a direct request to the (1) system log URL, (2) whitelist URL, or (3) blacklist URL.

CVSS vector

AV:N/AC:L/C:P/I:P/A:NExploitability: 8.0 | Impact: 4.9

Affected Packages1 packages

Patches

Patch: esupport.trendmicro.com ↗Patch: esupport.trendmicro.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pfgp-c8ff-xcvx: Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3↗2022-05-13
▶
CVEList
CVE-2015-2873: Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3↗2015-08-23
▶
CVE-2015-2873 (MEDIUM CVSS 5.5) | Trend Micro Deep Discovery Inspecto | cvebase.io