CVE-2012-2998

2012-09-2810:40:21

CWE-89

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.2

Confidence

Low

EPSS

0.045

Percentile

92.6%

JSON

SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected configurations

Nvd

Node

trend_microcontrol_managerRange≤5.5std_ed

trend_microcontrol_managerMatch2.0

trend_microcontrol_managerMatch2.1

trend_microcontrol_managerMatch2.5

trend_microcontrol_managerMatch3.0ent_ed

trend_microcontrol_managerMatch3.0std_ed

trend_microcontrol_managerMatch3.5ent_ed

trend_microcontrol_managerMatch3.5std_ed

trend_microcontrol_managerMatch5.0adv_ed

trend_microcontrol_managerMatch5.0std_ed

trend_microcontrol_managerMatch5.5adv_ed

trend_microcontrol_managerMatch6.0

VendorProductVersionCPE
trend_microcontrol_manager*cpe:2.3:a:trend_micro:control_manager:*:*:std_ed:*:*:*:*:*
trend_microcontrol_manager2.0cpe:2.3:a:trend_micro:control_manager:2.0:*:*:*:*:*:*:*
trend_microcontrol_manager2.1cpe:2.3:a:trend_micro:control_manager:2.1:*:*:*:*:*:*:*
trend_microcontrol_manager2.5cpe:2.3:a:trend_micro:control_manager:2.5:*:*:*:*:*:*:*
trend_microcontrol_manager3.0cpe:2.3:a:trend_micro:control_manager:3.0:*:ent_ed:*:*:*:*:*
trend_microcontrol_manager3.0cpe:2.3:a:trend_micro:control_manager:3.0:*:std_ed:*:*:*:*:*
trend_microcontrol_manager3.5cpe:2.3:a:trend_micro:control_manager:3.5:*:ent_ed:*:*:*:*:*
trend_microcontrol_manager3.5cpe:2.3:a:trend_micro:control_manager:3.5:*:std_ed:*:*:*:*:*
trend_microcontrol_manager5.0cpe:2.3:a:trend_micro:control_manager:5.0:*:adv_ed:*:*:*:*:*
trend_microcontrol_manager5.0cpe:2.3:a:trend_micro:control_manager:5.0:*:std_ed:*:*:*:*:*

Vendor	Product	Version	CPE
trend_micro	control_manager	*	cpe:2.3:a:trend_micro:control_manager:::std_ed:::::*
trend_micro	control_manager	2.0	cpe:2.3:a:trend_micro:control_manager:2.0:::::::*
trend_micro	control_manager	2.1	cpe:2.3:a:trend_micro:control_manager:2.1:::::::*
trend_micro	control_manager	2.5	cpe:2.3:a:trend_micro:control_manager:2.5:::::::*
trend_micro	control_manager	3.0	cpe:2.3:a:trend_micro:control_manager:3.0::ent_ed:::::
trend_micro	control_manager	3.0	cpe:2.3:a:trend_micro:control_manager:3.0::std_ed:::::
trend_micro	control_manager	3.5	cpe:2.3:a:trend_micro:control_manager:3.5::ent_ed:::::
trend_micro	control_manager	3.5	cpe:2.3:a:trend_micro:control_manager:3.5::std_ed:::::
trend_micro	control_manager	5.0	cpe:2.3:a:trend_micro:control_manager:5.0::adv_ed:::::
trend_micro	control_manager	5.0	cpe:2.3:a:trend_micro:control_manager:5.0::std_ed:::::