CVE-2017-11391: Command Injection

Published Aug 3, 2017

Updated

Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744.

Affected Software

2 affected components

trendmicro Interscan Messaging Security Virtual Appliance=9.0

trendmicro Interscan Messaging Security Virtual Appliance=9.1

Event History

Aug 3, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11391?

CVE-2017-11391 is classified as a critical vulnerability that allows for remote code execution.

How do I fix CVE-2017-11391?

To mitigate CVE-2017-11391, you should update to the latest patched version of Trend Micro InterScan Messaging Security Virtual Appliance.

What versions are affected by CVE-2017-11391?

CVE-2017-11391 affects Trend Micro InterScan Messaging Virtual Appliance versions 9.0 and 9.1.

Can CVE-2017-11391 be exploited remotely?

Yes, CVE-2017-11391 can be exploited remotely by attackers to execute arbitrary code.

What is the attack vector for CVE-2017-11391?

The attack vector for CVE-2017-11391 involves injecting commands through the "t" parameter within modTMCSS Proxy.