VULNERABILITY INTELLIGENCE
CVE-2018-6223
CVSS score9.8 CRITICAL
EPSS probability10.01%
CISA KEVNot currently listed
Published2018-03-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to manipulate the registration process of the product to reset configuration parameters.
Weakness classification
- CWE-306: Missing Authentication for Critical Function
Primary references
- security@trendmicro.com — Patch, Vendor Advisory
- security@trendmicro.com — Exploit, Technical Description, Third Party Advisory
- security@trendmicro.com — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry