High severity · published Aug 3, 2017
CVE-2017-11391
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable…
8.8
CVSS
62.1%
EPSS
No
On KEV
Description
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the "t" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)62.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Interscan Messaging Security Virtual Appliance · Trendmicro
9.0; 9.1 · source: NVD
Affected product
IM
Interscan Messaging Security Virtual Appliance
Trendmicro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-11391
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-11391
Third Party Advisory
http://www.securityfocus.com/bid/100075
Third Party Advisory
http://www.zerodayinitiative.com/advisories/ZDI-17-502
Vendor Advisory
https://success.trendmicro.com/solution/1117723
More from Interscan Messaging Security Virtual Appliance
8.8
CVE-2020-27694
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 has updated a specific critical library that may vulnerable to attack
8.8
CVE-2020-27016
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a cross-site request forgery (CSRF) vulnerability which could allow an attacker to modify…
8.8
CVE-2017-11392
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable…
8.8
CVE-2017-6398
An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600
8.1
CVE-2018-3609
A vulnerability in the Trend Micro InterScan Messaging Security Virtual Appliance 9.0 and 9.1 management portal could allow an unauthenticated user to access sensitive information…