CVE-2017-14084

moderate-risk

Published 2017-10-06

A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.

Do I need to act?

7.9% chance of exploitation in next 30 days

EPSS score — moderate exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

1 public exploit available

42891

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.1/10 High

NETWORK / HIGH complexity

Affected Products (2)

Officescan

Affected Vendors

Trendmicro

References (18)

Third Party Advisory http://hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-...

Third Party Advisory http://packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-M...

Mailing List http://seclists.org/fulldisclosure/2017/Sep/87

http://www.securityfocus.com/archive/1/541264/100/0/threaded

http://www.securityfocus.com/archive/1/541275/100/0/threaded

Third Party Advisory http://www.securityfocus.com/bid/101072

Third Party Advisory http://www.securitytracker.com/id/1039500

Issue Tracking https://success.trendmicro.com/solution/1118372

Third Party Advisory https://www.exploit-db.com/exploits/42891/