CVEvulnerability
CVE-2018-6220
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-03-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-74
Description
An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems.
Affected configurations
• trendmicro email encryption gateway 5.5
Related
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
References
- https://success.trendmicro.com/solution/1119349 Patch, Vendor Advisory
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/44166/ Exploit, Third Party Advisory, VDB Entry
- https://success.trendmicro.com/solution/1119349 Patch, Vendor Advisory
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/44166/ Exploit, Third Party Advisory, VDB Entry