弁財天

『Due to combination of these vulnerabilities, unauthenticated users can execute a terminal command under the context of the root user.』

Trend Micro Web Security Virtual Appliance 6.5 SP2 Patch 4 Build 1901 - Remote Code Execution (Metasploit)https://t.co/NMCGau1iNB

— Autumn Good (@autumn_good_35) July 16, 2020

『Due to the seriousness of these vulnerabilities, customers are highly encouraged to update to the latest build as soon as possible.』

SECURITY BULLETIN: Trend Micro InterScan Web Security Virtual Appliance (IWSVA) Multiple Vulnerabilitieshttps://t.co/rDfI5V11jW pic.twitter.com/UVuKmEmLJg

— Autumn Good (@autumn_good_35) May 29, 2020

trendmicro.co.jp→InterScan Web Security Virtual Appliance™ & InterScan Web Security Suite™ Plus(2016年6月)

クライアントPCから見てプロキシみたいに存在するので、ここをRCEで攻略されるとなんでも可能になるw。