CVE-2017-14084

概要

参考情報

• hyp3rlinx.altervista.org/advisories/CVE-2017-14084-TRENDMICRO-OFFICESCAN-XG-CURL-MITM-REMOTE-CODE-EXECUTION.txt · Third Party Advisory
• packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.html · Third Party Advisory
• seclists.org/fulldisclosure/2017/Sep/87 · Mailing List
• securityfocus.com/archive/1/541264/100/0/threaded
• securityfocus.com/archive/1/541275/100/0/threaded
• securityfocus.com/bid/101072 · Third Party Advisory
• securitytracker.com/id/1039500 · Third Party Advisory
• success.trendmicro.com/solution/1118372 · Issue Tracking
• exploit-db.com/exploits/42891 · Third Party Advisory

officescan のその他の脆弱性

• CVE-2021-32465高 8.8An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote…
• CVE-2021-32464高 7.8An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business…
• CVE-2021-36742高 7.8悪用確認済み（CISA KEV）A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.…
• CVE-2021-36741高 8.8悪用確認済み（CISA KEV）An improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 1…
• CVE-2021-28646中 5.5An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker…