CVE-2017-14078
CriticalSummary
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 contain SQL Injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
Risk Assessment
Attackers can exploit these vulnerabilities to gain control over the system, potentially leading to data loss or security breaches within the organization.
Recommendation
It is recommended to upgrade to version 9.7 Patch 3 or later to mitigate these vulnerabilities.
Other vulnerabilities in Trend Micro Mobile Security (Enterprise)
See all- CVE-2017-14081High
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 have proxy command injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
- CVE-2017-14079High
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
- CVE-2017-14080Critical
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
Original NVD description (English source)
SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.