Intrusion Prevention

Trend.Micro.SafeSync.RestartService.Command.Injection

Description

This indicates an attack attempt against a Command Injection vulnerability in Trend Micro Control Manager.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application while handling crafted requests. A remote attacker can exploit this to execute arbitrary commands, via a crafted request.

Affected Products

Trend Micro SafeSync for Enterprise prior to 3.2 HF24 (build 1508)

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor
https://success.trendmicro.com/solution/1116749