{"id":"CVE-2020-8466","published":"2020-12-17T21:05:48Z","modified":"2024-08-04T10:03:44Z","title":"A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved…","vendor":"Trend Micro","product":"Trend Micro InterScan Web Security Virtual Appliance","tier":"core","eol":null,"affectedVersions":[{"vendor":"Trend Micro","product":"Trend Micro InterScan Web Security Virtual Appliance","versions":["6.5 SP2"]}],"description":{"text":"A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password.","provenance":"source","from":"CVE.org"},"summary":{"text":"A command injection flaw in the Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 affects the password handling in that product when the improved password hashing method is enabled. An unauthenticated attacker who supplies a manipulated password can execute certain commands, with no prior login required and no stated user interaction or network-access condition beyond reaching the appliance.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:23:04Z"},"cvss":null,"epss":{"score":0.64075,"percentile":0.99224,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":1,"pulses":[{"name":"Proof Point Emerging Exploit list","url":"https://otx.alienvault.com/pulse/6399fdc966948f6b537b9762","created":"2022-12-14"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://success.trendmicro.com/solution/000283077","tags":["x_refsource_MISC"]},{"url":"https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2020-29332","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29332","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2020-12-17","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2020-8466","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":20.5,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.84,"detail":"percentile 0.9922"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}