CVE-2017-14078

CVE-2017-14078: vulnerability in Trend Micro Mobile Security (Enterprise)

Published · Updated

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 50%
exploitation probability
50%top 1% of all CVEs
observed exploitation
nono source reports it
SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Affected products
Trend Micro · Mobile Security (Enterprise)
Related CVEs — Trend Micro Mobile Security (Enterprise)

In the same product, most dangerous first.

CVE-2017-14079—CVE-2017-14079EPSS 10.9%CVE-2017-14080—CVE-2017-14080EPSS 3.0%
References
https://success.trendmicro.com/solution/1118224http://www.securityfocus.com/bid/100966http://www.zerodayinitiative.com/advisories/ZDI-17-739http://www.zerodayinitiative.com/advisories/ZDI-17-740http://www.zerodayinitiative.com/advisories/ZDI-17-741http://www.zerodayinitiative.com/advisories/ZDI-17-742http://www.zerodayinitiative.com/advisories/ZDI-17-743http://www.zerodayinitiative.com/advisories/ZDI-17-744http://www.zerodayinitiative.com/advisories/ZDI-17-745http://www.zerodayinitiative.com/advisories/ZDI-17-746http://www.zerodayinitiative.com/advisories/ZDI-17-747http://www.zerodayinitiative.com/advisories/ZDI-17-748