PT-2017-13236 · Trend Micro · Trend Micro Mobile Security
Malerisch
+3
·
Publicado
2017-09-15
·
Atualizado
2017-09-29
·
CVE-2017-14079
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Trend Micro Mobile Security (Enterprise) versions prior to 9.7 Patch 3
Description
The issue allows remote attackers to execute arbitrary code on vulnerable installations due to unrestricted file uploads. This can be achieved through various file upload functions, including
upload img file, upload font file, upload wallpaper file, and upload app file.Recommendations
For versions prior to 9.7 Patch 3, update to version 9.7 Patch 3 or later to resolve the issue. As a temporary workaround, consider restricting or disabling the file upload functionality until a patch is applied. Specifically, restrict access to the
upload img file, upload font file, upload wallpaper file, and upload app file functions to minimize the risk of exploitation.Correção
RCE
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Trend Micro Mobile Security