CVE-2017-11395: Command Injection

Published Sep 22, 2017

Updated

Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations.

Affected Software

2 affected components

trendmicro Smart Protection Server=3.1

trendmicro Smart Protection Server=3.2

Remediation

Patch Available

https://success.trendmicro.com/solution/1117933

Event History

Sep 22, 2017

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-11395?

CVE-2017-11395 is considered a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2017-11395?

To fix CVE-2017-11395, update Trend Micro Smart Protection Server to a patched version that addresses this vulnerability.

Who is affected by CVE-2017-11395?

CVE-2017-11395 affects users of Trend Micro Smart Protection Server versions 3.1 and 3.2.

What type of vulnerability is CVE-2017-11395?

CVE-2017-11395 is a command injection vulnerability that allows attackers to execute arbitrary code.

What is the impact of CVE-2017-11395?

The impact of CVE-2017-11395 could result in unauthorized access to system functions and the execution of malicious commands.