Control Manager
Vendor:
First CVE: May 2, 2005 · Active for 21 years
28
Total CVEs
More Total CVEs than 94% of tracked products
3.1
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
8.4
Avg CVSS
Higher Avg CVSS than 77% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Control Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 2, 2005
21 years ago
Most Recent CVE
Mar 3, 2021
1,969 days ago
CVE Severity & Scoring
Control Manager28 CVEs
11%
61%
29%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (7.1%)
Network20 (71.4%)
Unknown6 (21.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low21 (75.0%)
High1 (3.6%)
Unknown6 (21.4%)
User Interaction
None21 (75.0%)
Unknown6 (21.4%)
Required1 (3.6%)
Privileges Required
Low9 (32.1%)
High0 (0.0%)
None13 (46.4%)
Unknown6 (21.4%)
Top CVEs
Signals from CVEs in this product scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-5001HIGH Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 | Dec 25, 2011 | 10.0 | 81 | NO | YES |
CVE-2018-3604HIGH GetXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute arbitrary code on vulnerable ins | Feb 9, 2018 | 8.8 | 64 | NO | NO |
CVE-2018-3606HIGH XXXStatusXXX, XXXSummary, TemplateXXX and XXXCompliance method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote att | Feb 9, 2018 | 8.8 | 53 | NO | NO |
CVE-2017-11383CRITICAL SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dl | Aug 2, 2017 | 9.8 | 49 | NO | NO |
CVE-2017-11389CRITICAL Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory. Formerly ZDI- | Aug 2, 2017 | 9.8 | 44 | NO | NO |
CVE-2017-11385CRITICAL SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dl | Aug 2, 2017 | 9.8 | 44 | NO | NO |
CVE-2017-11384CRITICAL SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack of proper user input validation in mdHandlerLicenseManager.dl | Aug 2, 2017 | 9.8 | 44 | NO | NO |
CVE-2017-11386CRITICAL SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportSchedul | Aug 2, 2017 | 9.8 | 37 | NO | NO |
CVE-2018-3605HIGH TopXXX, ViolationXXX, and IncidentXXX method SQL injection remote code execution (RCE) vulnerabilities in Trend Micro Control Manager 6.0 could allow a remote attacker to execute a | Feb 9, 2018 | 8.8 | 36 | NO | NO |
CVE-2012-2998HIGH SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitrar | Sep 28, 2012 | 7.5 | 34 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (28 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
3.6% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
7.1% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (28 CVEs).
Media Mentions
Signals from CVEs in this product scope (28 CVEs).
Top CNAs Publishing CVEs For Control Manager
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| netware | 2 | 8.4 | 6.3% | 0 | 0 |
| gold | 2 | 8.4 | 6.3% | 0 | 0 |
| 7.0 | 5 | 8.0 | 2.5% | 0 | 0 |
| 6.0 | 21 | 8.8 | 18.7% | 0 | 1 |
| 5.5 | 1 | 7.5 | 6.1% | 0 | 1 |
| 5.0 | 1 | 7.5 | 6.1% | 0 | 1 |
| 3.5 | 3 | 7.2 | 5.5% | 0 | 1 |
| 3.0_enterprise | 1 | 7.5 | 1.8% | 0 | 0 |
| 3.0 | 1 | 7.5 | 6.1% | 0 | 1 |
| 2.5.0 | 1 | 9.3 | 8.3% | 0 | 0 |
| 2.5 | 1 | 7.5 | 6.1% | 0 | 1 |
| 2.1 | 1 | 7.5 | 6.1% | 0 | 1 |
| 2.0 | 1 | 7.5 | 6.1% | 0 | 1 |