CVE-2017-14080
CriticalSummary
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data and system functions, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to version 9.7 Patch 3 or later to mitigate this vulnerability.
Other vulnerabilities in Trend Micro Mobile Security (Enterprise)
See all- CVE-2017-14081High
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 have proxy command injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
- CVE-2017-14079High
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
- CVE-2017-14078Critical
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 contain SQL Injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
Original NVD description (English source)
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.