CVE-2018-6220 EXPLOIT
9.8
CRITICAL · CVSS 3.0 · EPSS 9.9% (pctl 95)
Patch early
A public exploit exists.
Description
An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arbitrary data, which may lead to gaining code execution on vulnerable systems.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 9.85% — more likely to be exploited than 95% of all CVEs |
| Weakness | CWE-74 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2018-03-15 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| trendmicro | email encryption gateway |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Trend Micro Email Encryption Gateway 5.5 (Build 1111.00) - Multiple Vulnerabilities | 2018-02-22 |
References
- https://success.trendmicro.com/solution/1119349
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44166/
- https://success.trendmicro.com/solution/1119349
- https://www.coresecurity.com/advisories/trend-micro-email-encryption-gateway-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/44166/
→ the Explorer · watch your stack · NVD