CVE-2017-11392

High

Published: 03/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The flaw can be exploited by parsing the 'T' parameter within modTMCSS Proxy.

Risk Assessment

Attackers can remotely take control of the system, leading to serious threats to data security and the organization's infrastructure.

Recommendation

It is recommended to update to the latest version of Trend Micro InterScan Messaging Virtual Appliance and monitor systems for unauthorized activities.

Other vulnerabilities in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1

CVE-2017-11391High
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the 't' parameter within modTMCSS Proxy.

Original NVD description (English source)

Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "T" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745.