VULNERABILITY INTELLIGENCE

CVE-2017-11393

CVSS score9.8 CRITICAL
EPSS probability15.89%
CISA KEVNot currently listed
Published2017-08-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references