CVE-2017-14086

HIGH 7.5CVE-2017-14086 · Published 06/10/2017 · updated 17/06/2026

In short

CVE-2017-14086 is a HIGH (CVSS 7.5) vulnerability affecting officescan (trendmicro).
Chance of exploitation in the next 30 days (EPSS): 7.9%, higher than 94.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
officescan trendmicro	`= 11.0= 12.0`	No fix yet

Description

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.

References

hyp3rlinx.altervista.org/advisories/CVE-2017-14086-TRENDMICRO-OFFICESCAN-XG-PRE-AUTH-START-REMOTE-PROCESS-CODE-EXECUTION-MEM-CORRUPT.txt · Exploit
packetstormsecurity.com/files/144401/TrendMicro-OfficeScan-11.0-XG-12.0-Auth-Start-Code-Execution.html · Third Party Advisory
seclists.org/fulldisclosure/2017/Sep/88 · Mailing List
securityfocus.com/archive/1/541274/100/0/threaded
securityfocus.com/bid/101076 · Third Party Advisory
securitytracker.com/id/1039500 · Third Party Advisory
success.trendmicro.com/solution/1118372 · Patch
exploit-db.com/exploits/42892 · Third Party Advisory

More vulnerabilities in officescan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

officescan

trendmicro

= 11.0= 12.0

No fix yet

Description

More vulnerabilities in officescan

See all →