CVE-2017-11381
CriticalSummary
A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.
Risk Assessment
This vulnerability may allow attackers to gain unauthorized access to sensitive system functions, potentially leading to serious security breaches.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor access to the pre-configuration console.
Other vulnerabilities in Trend Micro Deep Discovery Director 1.1
See all- CVE-2017-11379High
In Trend Micro Deep Discovery Director 1.1, configuration and database backup archives are not signed or validated, which may lead to unauthorized access to data.
- CVE-2017-11380Critical
Backup archives in Trend Micro Deep Discovery Director 1.1 are encrypted with a static password, suggesting that the same password may be used across all virtual appliance instances.
Original NVD description (English source)
A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.