Test ID:	1.3.6.1.4.1.25623.1.0.106143
Category:	Web application abuses
Title:	Trend Micro Deep Discovery Inspector RCE Vulnerability
Summary:	Trend Micro Deep Discovery Inspector is prone to a remote; command execution (RCE) vulnerability.
Description:	Summary: Trend Micro Deep Discovery Inspector is prone to a remote command execution (RCE) vulnerability. Vulnerability Insight: hotfix_upload.cgi allows remote administrators to execute arbitrary code via a crafted string. Vulnerability Impact: A remote authenticated attacker could potentially attain code execution under the context of the root user. Affected Software/OS: Version 3.7, 3.8 SP1 (3.81), and 3.8 SP2 (3.82). Solution: Install the vendor patch. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5840 https://www.exploit-db.com/exploits/40180/ http://jvn.jp/en/jp/JVN55428526/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000103.html http://www.zerodayinitiative.com/advisories/ZDI-16-373
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.