CVE-2017-11395
high · 8.8Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations.
8.8
CVSS
14.1%
EPSS (exploit prob.)
96th
EPSS percentile
2017-09-22
Published
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| trendmicro | smart_protection_server | 3.1 |
| trendmicro | smart_protection_server | 3.2 |
Check a specific version with /api/v1/cve/match.
References
- http://www.coresecurity.com/advisories/trend-micro-smart-protection-os-command-injection
- http://www.securityfocus.com/bid/100461
- https://success.trendmicro.com/solution/1117933
- http://www.coresecurity.com/advisories/trend-micro-smart-protection-os-command-injection
- http://www.securityfocus.com/bid/100461
- https://success.trendmicro.com/solution/1117933
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2017-11395