CVE-2017-11396: Code Injection
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potential attackers who already have administration rights to the console to implement remote code injections.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-11396?
CVE-2017-11396 has been classified as a critical vulnerability due to its potential for remote code execution by attackers with administrative access.
How do I fix CVE-2017-11396?
To remediate CVE-2017-11396, ensure you update to the latest version of Trend Micro Web Security Virtual Appliance, as patches addressing this vulnerability will be provided.
Who is affected by CVE-2017-11396?
CVE-2017-11396 affects users of Trend Micro Web Security Virtual Appliance version 6.5 who possess administrative rights.
What types of attacks can be executed through CVE-2017-11396?
CVE-2017-11396 could allow attackers to perform remote code injections on the affected system.
Is CVE-2017-11396 a zero-day vulnerability?
CVE-2017-11396 is not a zero-day vulnerability as it was publicly disclosed and a patch is available for mitigation.