CVE-2017-14084

HIGH 8.1CVE-2017-14084 · Published 06/10/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
officescan trendmicro	`= 11.0= 12.0`	No fix yet

Description

A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary code on vulnerable installations.

References

hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt · Third Party Advisory
packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html · Third Party Advisory
seclists.org/fulldisclosure/2017/Sep/87 · Mailing List
securityfocus.com/archive/1/541264/100/0/threaded
securityfocus.com/archive/1/541275/100/0/threaded
securityfocus.com/bid/101072 · Third Party Advisory
securitytracker.com/id/1039500 · Third Party Advisory
success.trendmicro.com/solution/1118372 · Issue Tracking
exploit-db.com/exploits/42891 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free