CVE-2017-11388

HIGH 8.8CVE-2017-11388 · Published 02/08/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
control manager trendmicro	`= 6.0`	No fix yet

Description

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn't properly validate user provided strings before constructing SQL queries. Formerly ZDI-CAN-4639 and ZDI-CAN-4638.

References

securityfocus.com/bid/100078
securitytracker.com/id/1039049
zerodayinitiative.com/advisories/ZDI-17-498 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-17-499 · Third Party Advisory
success.trendmicro.com/solution/1117722 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free