CVE-2017-11393

CVE-2017-11393: falha em Trend Micro OfficeScan

Publicada em · Atualizada em

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 16%
probabilidade de exploração
16%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.
Produtos afetados
Trend Micro · Trend Micro OfficeScan
CVEs relacionadas — Trend Micro OfficeScan

No mesmo produto, das mais perigosas para as menos.

CVE-2019-18187HIGHCVE-2019-18187EPSS 25.1%KEVCVE-2021-36741HIGHCVE-2021-36741EPSS 5.0%KEVCVE-2021-36742HIGHCVE-2021-36742EPSS 1.5%KEVCVE-2017-11394—CVE-2017-11394EPSS 66.8%CVE-2017-14084—CVE-2017-14084EPSS 10.1%CVE-2017-14089—CVE-2017-14089EPSS 9.8%
Referências
https://success.trendmicro.com/solution/1117769http://www.securityfocus.com/bid/100127http://www.zerodayinitiative.com/advisories/ZDI-17-522