Vulnerability in Trend Micro Interscan Web Security Virtual Appliance
CVE-2020-28578
A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an unauthenticated, remote attacker to send a specially crafted HTTP message and achieve remote code execution with elevated privileges.
EPSS: 0.585 (98.2th percentile) — read the EPSS interpretation.
Affected products
- Trend Micro Interscan Web Security Virtual Appliance — versions 6.5 SP2
References
- success.trendmicro.com/solution/000281954 (x_refsource_MISC)
- www.tenable.com/security/research/tra-2020-63 (x_refsource_MISC)