CVE-2017-11386: SQL Injection
Published Aug 2, 2017
·Updated
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549.
Affected Software
1 affected component
trendmicro Control Manager=6.0
Remediation
Patch Available
Event History
Aug 2, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11386?
CVE-2017-11386 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2017-11386?
To fix CVE-2017-11386, update Trend Micro Control Manager to the latest available version that addresses this vulnerability.
3
What are the potential impacts of CVE-2017-11386?
The potential impacts of CVE-2017-11386 include unauthorized access and execution of arbitrary code on affected systems.
4
Which software is affected by CVE-2017-11386?
CVE-2017-11386 affects Trend Micro Control Manager version 6.0.
5
What is the nature of the vulnerability in CVE-2017-11386?
CVE-2017-11386 is an SQL injection vulnerability that arises from inadequate user input validation.