VULNERABILITY INTELLIGENCE

CVE-2017-11394

CVSS score9.8 CRITICAL
EPSS probability66.77%
CISA KEVNot currently listed
Published2017-08-03
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references