CVE-2018-6231: Trend Micro Smart Protection Server

Critical severity, CVSS 9.8. EPSS: 6.9% chance of exploitation in the next 30 days.

A server auth command injection authentication bypass vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.3 and below could allow remote attackers to escalate privileges on vulnerable installations.

Affected products

• Trend Micro Smart Protection Server: up to and including 3.3

Published 2018-03-15. Last modified 2026-06-17.