CVE-2017-14081
HighSummary
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 have proxy command injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
Risk Assessment
Attackers can remotely take control of the system, potentially leading to data loss or system compromise.
Recommendation
It is recommended to update Trend Micro Mobile Security (Enterprise) to version 9.7 Patch 3 or later to mitigate these vulnerabilities.
Other vulnerabilities in Trend Micro Mobile Security (Enterprise)
See all- CVE-2017-14079High
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
- CVE-2017-14080Critical
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.
- CVE-2017-14078Critical
Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 contain SQL Injection vulnerabilities that allow remote attackers to execute arbitrary code on vulnerable installations.
Original NVD description (English source)
Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.