RULE(RULE ID:317348)

Rule General Information
Release Date: 2017-04-26
Rule Name: WEB-OTHER Trend Micro SafeSync for Enterprise storage.pm device_id role Command Injection -1 (ZDI-17-122)
Severity:
CVE ID:
Rule Protection Details
Description: A command injection vulnerability exists in Trend Micro's SafeSync for Enterprise storage.pm page.
Impact: Remote command execution
Affected OS: Windows, Other Unix, FreeBSD, Linux
Reference: ZeroDayInitiative:ZDI-17-122
ZeroDayInitiative:ZDI-17-123
ZeroDayInitiative:ZDI-17-124
Solutions
Update vendor's patch.