CVE-2018-6223

A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the registration process of the product to reset configuration parameters.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@trendmicro.com

Published

2018-03-15

Last modified

2024-08-05

Weaknesses

CWE-306

Affected products

• Trend Micro Email Encryption Gateway (Trend Micro)
• Email Encryption Gateway (Trendmicro)

References

• https://success.trendmicro.com/solution/1119349
• https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
• https://www.exploit-db.com/exploits/44166/