[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fU9JjWiPolxK4YXdT5PVjiGmf_H_tUArf4x9uQn3SoIk":3,"g5a-risk:CVE-2008-3866":158},{"success":4,"data":5,"meta":156},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":51,"references":52,"referencesCount":106,"weaknesses":107,"weaknessesCount":115,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":116,"seoMetadata":117,"configurations":142,"relatedVendorCves":154,"notableEvents":155},"CVE-2008-3866","What is CVE-2008-3866?","The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets.","The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 ...","2009-01-21T20:30:00.233","2026-06-16T22:56:42.117",4.6,"AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","LOCAL","LOW","NONE","PARTIAL","",null,"MEDIUM",3.9,6.4,false,[],0.00401,[34,34,34,34,34,34,34],"Medium",[38,43,47],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"trend_micro","internet_security_2007","*","cpe:2.3:a:trend_micro:internet_security_2007:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":4},"internet_security_2008","17.0.1224","cpe:2.3:a:trend_micro:internet_security_2008:17.0.1224:*:*:*:*:*:*:*",{"vendor":39,"product":48,"version":49,"criteria":50,"vulnerable":4},"officescan","8.0","cpe:2.3:a:trend_micro:officescan:8.0:sp1:*:*:*:*:*:*",3,[53,59,62,65,69,73,76,80,84,88,90,92,94,96,98,100,102,104],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F31160","Secunia",[57,58],"Patch","Vendor Advisory",{"url":60,"source":55,"tags":61},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F33609",[57,58],{"url":63,"source":55,"tags":64},"http:\u002F\u002Fsecunia.com\u002Fsecunia_research\u002F2008-43\u002F",[58],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F33358","Securityfocus",[57],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1021616","Securitytracker",[],{"url":74,"source":71,"tags":75},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1021617",[],{"url":77,"source":78,"tags":79},"http:\u002F\u002Fwww.trendmicro.com\u002Fftp\u002Fdocumentation\u002Freadme\u002FOSCE8.0_SP1_Patch1_CriticalPatch_3191_Readme.txt","Trendmicro",[58],{"url":81,"source":82,"tags":83},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F0191","Vupen",[],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F48108","Ibmcloud",[],{"url":54,"source":55,"tags":89},[57,58],{"url":60,"source":55,"tags":91},[57,58],{"url":63,"source":55,"tags":93},[58],{"url":66,"source":67,"tags":95},[57],{"url":70,"source":71,"tags":97},[],{"url":74,"source":71,"tags":99},[],{"url":77,"source":78,"tags":101},[58],{"url":81,"source":82,"tags":103},[],{"url":85,"source":86,"tags":105},[],18,[108],{"id":109,"name":110,"description":111,"extendedDescription":27,"status":112,"abstraction":113,"structure":114},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","Draft","Class","Simple",1,[],{"title":118,"metaDescription":119,"keywords":120,"canonicalUrl":121,"structuredData":122},"What is CVE-2008-3866? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-3866, a medium severity cyber security vulnerability from 2009. The Trend Micro Personal Firewall service (aka TmPfw.exe) ...","CVE-2008-3866, CVE-2008-3866 vulnerability, CVE-2008-3866 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, trend_micro security, internet_security_2007 vulnerability, internet_security_2008 vulnerability, officescan vulnerability","\u002Fwhat-is\u002Fcve-2008-3866",{"@context":123,"@type":124,"headline":118,"description":119,"datePublished":10,"dateModified":11,"author":125,"publisher":129,"about":133,"mainEntityOfPage":137,"articleSection":140,"keywords":141},"https:\u002F\u002Fschema.org","TechArticle",{"@type":126,"name":127,"url":128},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":126,"name":127,"url":128,"logo":130},{"@type":131,"url":132},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":134,"name":6,"description":135,"additionalType":136},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":138,"@id":139},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-3866","Cybersecurity","CVE-2008-3866, CVE-2008-3866 vulnerability, CVE-2008-3866 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[143],{"Operator":28,"Negate":28,"Nodes":144},[145],{"Operator":146,"Negate":32,"CPEMatch":147},"OR",[148,150,152],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C374395B-80B1-4FBA-88F6-1C155900E4DB",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":151,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"F794E937-C7EC-423B-AF79-F7C214114BCF",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":153,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9A220318-78FB-4D3B-968D-7B0BF3BB1969",[],[],{"lastModified":11,"cacheTime":157,"version":22},1792367726375,{"score":159,"band":160,"action":161,"scoredAt":162},15,"Info","Track","2026-10-17T06:36:16.389211+00:00"]