CVE-2018-6220

Description

An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems.

Affected products

• Trend Micro / Trend Micro Email Encryption Gateway5.5 – 5.5

References

• EXPLOIThttps://www.exploit-db.com/exploits/44166/
• MISChttps://success.trendmicro.com/solution/1119349
• VENDOR_ADVISORYhttps://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities