CVE-2017-14081

Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.

Score

CVSS 3.0 8.8 High

Status

Modified - security@trendmicro.com

Published

2017-09-22

Last modified

2024-08-05

Weaknesses

CWE-77

Affected products

• Mobile Security (Trendmicro)

References

• http://www.securityfocus.com/bid/100969
• http://www.zerodayinitiative.com/advisories/ZDI-17-752
• http://www.zerodayinitiative.com/advisories/ZDI-17-774
• https://success.trendmicro.com/solution/1118224