CVE-2016-7552
CRITICALOn the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files…
EPSS Exploitation Probability
EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.
Description
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
Affected Products
threat discovery appliancetrendmicroResearch use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory trav…
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory trav…
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory trav…
Frequently Asked Questions
Is CVE-2016-7552 in your stack?
O3 detects CVE-2016-7552 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.