CVE-2017-11393: Command Injection

Published Aug 3, 2017

Updated

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.

Affected Software

2 affected components

trendmicro Officescan=11.0-sp1

trendmicro Officescan=12.0

Remediation

Patch Available

https://success.trendmicro.com/solution/1117769

Event History

Aug 3, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11393?

CVE-2017-11393 has been assigned a high severity rating due to its ability to allow remote code execution.

How do I fix CVE-2017-11393?

To fix CVE-2017-11393, it is recommended to apply the latest security patches provided by Trend Micro for OfficeScan.

What systems are impacted by CVE-2017-11393?

CVE-2017-11393 affects Trend Micro OfficeScan version 11.0 SP1 and version 12.0.

Is CVE-2017-11393 being actively exploited?

There have been reports that CVE-2017-11393 is being actively exploited in the wild.

What are the potential consequences of CVE-2017-11393?

Exploitation of CVE-2017-11393 could lead to unauthorized access and execution of arbitrary code on vulnerable installations.