high8.1Public exploit code
CVE-2017-14084
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable ins…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Trend Micro OfficeScan 11.0/XG (12.0) - Man In The Middle Remote Code Execution2017-09-28 · remote · windows · Verified
Impact
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Officescan | Versions 11.0, 12.0 |
References
- NVD record
- CVE.org record
- http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt
- http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html
- http://seclists.org/fulldisclosure/2017/Sep/87
- http://www.securityfocus.com/archive/1/541264/100/0/threaded
- http://www.securityfocus.com/archive/1/541275/100/0/threaded
- http://www.securityfocus.com/bid/101072
- http://www.securitytracker.com/id/1039500
- https://success.trendmicro.com/solution/1118372
- https://www.exploit-db.com/exploits/42891/
- http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt
- http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html
- http://seclists.org/fulldisclosure/2017/Sep/87
- http://www.securityfocus.com/archive/1/541264/100/0/threaded
- http://www.securityfocus.com/archive/1/541275/100/0/threaded
- http://www.securityfocus.com/bid/101072
- http://www.securitytracker.com/id/1039500
- https://success.trendmicro.com/solution/1118372
- https://www.exploit-db.com/exploits/42891/