CVE-2017-11393 | BDVDB-2026-88424 Detail

Trend MicroTrend Micro OfficeScan

Description#

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://success.trendmicro.com/solution/1117769
http://www.zerodayinitiative.com/advisories/ZDI-17-522
http://www.securityfocus.com/bid/100127

Exploit#

No public exploit known

History#

Version 12017-08-03Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.