CVE-2017-11393

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-08-03 · updated 2026-06-17
Weakness: CWE-20

Description

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the tr parameter within Proxy.php. Formerly ZDI-CAN-4543.

Affected products

Trend Micro OfficeScan: 11.0-sp1, 12.0

References

http://www.securityfocus.com/bid/100127
http://www.zerodayinitiative.com/advisories/ZDI-17-522
https://success.trendmicro.com/solution/1117769
http://www.securityfocus.com/bid/100127
http://www.zerodayinitiative.com/advisories/ZDI-17-522
https://success.trendmicro.com/solution/1117769

Get alerted when CVE-2017-11393 or the next vulnerability affects your stack