What’s Vulnerable › Vulnerabilities

CVE-2017-14085

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-10-06 · updated 2026-06-17
• Weakness: CWE-200

Description

Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.

Affected products

• Trend Micro OfficeScan: 11.0-sp1, 12.0

References

• http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt
• http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Information-Disclosure.html
• http://seclists.org/fulldisclosure/2017/Sep/85
• http://www.securityfocus.com/archive/1/541281/100/0/threaded
• http://www.securityfocus.com/bid/101076
• http://www.securitytracker.com/id/1039500
• https://success.trendmicro.com/solution/1118372
• https://www.exploit-db.com/exploits/42893/
• http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE-NT-DOMAIN-PHP-INFO-DISCLOSURE.txt
• http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Information-Disclosure.html
• http://seclists.org/fulldisclosure/2017/Sep/85
• http://www.securityfocus.com/archive/1/541281/100/0/threaded

Get alerted when CVE-2017-14085 or the next vulnerability affects your stack