CVE-2017-11394

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Trend Micro	Trend Micro OfficeScan	11, XG (12)

References

http://www.securityfocus.com/bid/100130Third Party Advisory, VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-521Third Party Advisory, VDB Entry
https://success.trendmicro.com/solution/1117769Mitigation, Patch, Vendor Advisory
https://www.exploit-db.com/exploits/42971/
http://www.securityfocus.com/bid/100130Third Party Advisory, VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-17-521Third Party Advisory, VDB Entry
https://success.trendmicro.com/solution/1117769Mitigation, Patch, Vendor Advisory
https://www.exploit-db.com/exploits/42971/

Timeline

Published: Aug 3, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-113958.8Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers wi CVE-2017-113967.2Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potenti CVE-2017-113977.8A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote atta CVE-2017-113988.8A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow CVE-2017-113997.8Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a deni CVE-2017-11405.4IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri CVE-2017-114006.8An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allow CVE-2017-114019.8An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length f CVE-2017-114029.8An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in cus CVE-2017-114038.8The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a c CVE-2017-114044.9In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterfa CVE-2017-114054.9In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/modulei