CVE-2017-11394 EXPLOIT
9.8
CRITICAL · CVSS 3.0 · EPSS 66.8% (pctl 99)
Patch early
A public exploit exists.
Description
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 66.77% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-08-03 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| trendmicro | officescan |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution (Metasploit) | 2017-10-11 |
References
- http://www.securityfocus.com/bid/100130
- http://www.zerodayinitiative.com/advisories/ZDI-17-521
- https://success.trendmicro.com/solution/1117769
- https://www.exploit-db.com/exploits/42971/
- http://www.securityfocus.com/bid/100130
- http://www.zerodayinitiative.com/advisories/ZDI-17-521
- https://success.trendmicro.com/solution/1117769
- https://www.exploit-db.com/exploits/42971/
→ the Explorer · watch your stack · NVD