CVE-2017-11389

Critical

Published: 02/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute malicious code, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to update Trend Micro Control Manager to the latest version to mitigate this vulnerability and restrict access to web-facing directories.

Original NVD description (English source)

Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory. Formerly ZDI-CAN-4684.