Critical severity9.8NVD Advisory· Published Dec 17, 2020· Updated Jun 17, 2026
CVE-2020-8466
CVE-2020-8466
Description
A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execute certain commands by providing a manipulated password.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:sp2:*:*:*:*:*:*
- (no CPE)range: 6.5 SP2
- (no CPE)range: 6.5 SP2
Patches
Vulnerability mechanics
References
2- sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance/nvdExploitThird Party Advisory
- success.trendmicro.com/solution/000283077nvdVendor Advisory
News mentions
0No linked articles in our index yet.