CVE-2017-14084
First published: Thu Oct 05 2017(Updated: )
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro OfficeScan | =11.0-sp1 | |
| Trend Micro OfficeScan | =12.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt
- http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html
- http://seclists.org/fulldisclosure/2017/Sep/87
- http://www.securityfocus.com/archive/1/541264/100/0/threaded
- http://www.securityfocus.com/archive/1/541275/100/0/threaded
- http://www.securityfocus.com/bid/101072
- http://www.securitytracker.com/id/1039500
- https://success.trendmicro.com/solution/1118372
- https://www.exploit-db.com/exploits/42891/
Frequently Asked Questions
What is the severity of CVE-2017-14084?
CVE-2017-14084 is considered a critical vulnerability due to the potential for arbitrary code execution and the risk of a Man-in-the-Middle attack.
How do I fix CVE-2017-14084?
To mitigate CVE-2017-14084, ensure that your Trend Micro OfficeScan installation is updated to the latest version or apply any patches released by Trend Micro.
Which versions of Trend Micro OfficeScan are affected by CVE-2017-14084?
CVE-2017-14084 affects Trend Micro OfficeScan versions 11.0 SP1 and 12.0.
What type of attack can exploit CVE-2017-14084?
CVE-2017-14084 can be exploited in a Man-in-the-Middle attack that may allow remote code execution.
Is there a workaround for CVE-2017-14084 pending a patch?
There are no specific workarounds mentioned for CVE-2017-14084, so the best course of action is to update to a patched version as soon as possible.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/remedy
- agent/author
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/trendmicro
- canonical/trend micro officescan
- version/trend micro officescan/11.0-sp1
- version/trend micro officescan/12.0