High severity · published Aug 3, 2017
CVE-2017-11382
Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling…
7.5
CVSS
2.5%
EPSS
No
On KEV
Description
Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DD
Deep Discovery Email Inspector · Trendmicro
2.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-11382
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-11382
www.securityfocus.com
http://www.securityfocus.com/bid/100076
Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-17-503
Mitigation
https://success.trendmicro.com/solution/1116750
More from Deep Discovery Email Inspector
5.5
CVE-2021-25252
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system…