What’s Vulnerable › Vulnerabilities

CVE-2012-3022

• Severity: high (CVSS 8.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-04-16 · updated 2026-06-16
• Weakness: CWE-264

Description

The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted web site.

Affected products

• Canarylabs Trendlink: through 9.0.2.27051

References

• http://ics-cert.us-cert.gov/pdf/ICSA-13-098-01.pdf
• http://ics-cert.us-cert.gov/pdf/ICSA-13-098-01.pdf

Get alerted when CVE-2012-3022 or the next vulnerability affects your stack