Intrusion Prevention

Trend.Micro.Control.Manager.Lang.File.Inclusion

Description

This indicates an attack attempt against a File Inclusion vulnerability in Trend Micro Control Manager.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application while handling maliciously crafted requests. A remote attacker can exploit this to upload arbitrary file to a targeted server via a crafted request.

Affected Products

Trend Micro Control Manager prior to Version 6.0 build 3444

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor
https://success.trendmicro.com/solution/1116624