CVE-2018-6231

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-15 · updated 2026-06-17
Weakness: CWE-78

Description

A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remote attackers to escalate privileges on vulnerable installations.

Affected products

Trend Micro Smart Protection Server (Standalone): through 3.3

References

https://success.trendmicro.com/solution/1119385
https://www.zerodayinitiative.com/advisories/ZDI-18-218/
https://success.trendmicro.com/solution/1119385
https://www.zerodayinitiative.com/advisories/ZDI-18-218/

Get alerted when CVE-2018-6231 or the next vulnerability affects your stack