VULNERABILITY INTELLIGENCE
CVE-2018-6220
CVSS score9.8 CRITICAL
EPSS probability9.85%
CISA KEVNot currently listed
Published2018-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems.
Weakness classification
- CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Primary references
- security@trendmicro.com — Patch, Vendor Advisory
- security@trendmicro.com — Exploit, Technical Description, Third Party Advisory
- security@trendmicro.com — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry