CVEvulnerability
CVE-2018-6223
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-03-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-306
Description
A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the registration process of the product to reset configuration parameters.
Affected configurations
• trendmicro email encryption gateway 5.5
Related
Weakness · CWE (1)
- CWE-306 Missing Authentication for Critical Functionality weakness
References
- https://success.trendmicro.com/solution/1119349 Patch, Vendor Advisory
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/44166/ Exploit, Third Party Advisory, VDB Entry
- https://success.trendmicro.com/solution/1119349 Patch, Vendor Advisory
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities Exploit, Technical Description, Third Party Advisory
- https://www.exploit-db.com/exploits/44166/ Exploit, Third Party Advisory, VDB Entry