CVE-2017-11394

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 66.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-08-03 · updated 2026-06-17
Weakness: CWE-20

Description

Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.

Affected products

Trend Micro OfficeScan: 11.0-sp1, 12.0

References

http://www.securityfocus.com/bid/100130
http://www.zerodayinitiative.com/advisories/ZDI-17-521
https://success.trendmicro.com/solution/1117769
https://www.exploit-db.com/exploits/42971/
http://www.securityfocus.com/bid/100130
http://www.zerodayinitiative.com/advisories/ZDI-17-521
https://success.trendmicro.com/solution/1117769
https://www.exploit-db.com/exploits/42971/

Get alerted when CVE-2017-11394 or the next vulnerability affects your stack