CVE-2017-11381

Critical

Published: 01/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.

Risk Assessment

This vulnerability may allow attackers to gain unauthorized access to sensitive system functions, potentially leading to serious security breaches.

Recommendation

It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor access to the pre-configuration console.

Original NVD description (English source)

A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configuration console.