CVE-2017-14079
HighSummary
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute code, potentially leading to system compromise.
Recommendation
It is recommended to upgrade to version 9.7 Patch 3 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Trend Micro Mobile Security (Enterprise)
See all- CVE-2017-14081High
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 have proxy command injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
- CVE-2017-14080Critical
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
- CVE-2017-14078Critical
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 contain SQL Injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
Original NVD description (English source)
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.