Description
The SaveToFile method in a certain ActiveX control in TrendDisplay.dll in Canary Labs TrendLink 9.0.2.27051 and earlier does not properly restrict the creation of files, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a crafted web site.
Advisories 1
- ICSA-13-098-01 Canary Labs Inc Trend Link Insecure ActiveX Control Method CISA ICS & IT advisories · Jun 6, 2025