CVE-2016-6267

8.8 highEPSS 55%

High (8.8) in trendmicro smart protection server. EPSS 55% chance of exploitation in the next 30 days.

SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) spare_Community, (2) spare_AllowGroupIP, or (3) spare_AllowGroupNetmask parameter to admin_notification.php.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 55% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2017-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:smart_protection_server

References

https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/
https://success.trendmicro.com/solution/1114913
https://qkaiser.github.io/pentesting/trendmicro/2016/08/08/trendmicro-sps/
https://success.trendmicro.com/solution/1114913

Check your stack JSON