CVE-2017-14086: High severity trend micro officescan corporate edition vulnerability
Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14086?
CVE-2017-14086 has a high severity rating due to its potential for remote code execution by unauthenticated users.
How do I fix CVE-2017-14086?
To mitigate CVE-2017-14086, users should apply the latest patches provided by Trend Micro for OfficeScan 11.0 and 12.0.
Who is affected by CVE-2017-14086?
CVE-2017-14086 affects users of Trend Micro OfficeScan versions 11.0 SP1 and 12.0.
What type of vulnerability is CVE-2017-14086?
CVE-2017-14086 is a remote process execution vulnerability which allows unauthenticated users to start a process on the server.
What might happen if CVE-2017-14086 is exploited?
If exploited, CVE-2017-14086 could lead to server instability, unauthorized access, and significant disk space consumption due to INI corruption.