CVE-2003-1343
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.62%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web management interface via the vcc parameter, possibly "3560121183d3".
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.62% probability · 85th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- trend micro/scanmail
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
- http://secunia.com/advisories/7881Vendor Advisory
- http://www.securityfocus.com/bid/6619Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11061
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0021.html
- http://kb.trendmicro.com/solutions/solutionDetail.asp?solutionId=13352
- http://secunia.com/advisories/7881Vendor Advisory
- http://www.securityfocus.com/bid/6619Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11061
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.