VDB

GCVE-110-CERTCC-2012-950795

GCVE-110-CERTCC-2012-950795
Advisory PublishedCVSS 9.0/10
Vulnetix · Advisory published September 20, 2012
Trend Micro Control Manager fails to properly filter user-supplied input within the ad hoc query module which could allow an attacker to upload and execute arbitrary code against the system.
Download JSON Open in Console

Risk Scores

CVSS 2.0
9.0/10
Critical · AV:N/AC:M/Au:N/C:C/I:C/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report0
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7remediation_levelOFreport_confidenceCenvironmental_score2target_distributionLenvironmental_vectorCDP:LM/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-2998

Transitive aliases

GSD-2012-2998JVNDB-2012-000090GHSA-w5jw-j5vj-mhrq

References

Trend Micro Control Manager adhoc query vulnerability
url
Trend Micro Control Manager adhoc query vulnerability
url
Trend Micro Control Manager adhoc query vulnerability
url
Trend Micro Control Manager adhoc query vulnerability
url
Trend Micro Control Manager adhoc query vulnerability
url
Trend Micro Control Manager adhoc query vulnerability
url
Trend Micro Control Manager adhoc query vulnerability
url
Trend Micro Control Manager adhoc query vulnerability
advisory

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›