PT-2017-11980 · Trend Micro · Trend Micro Web Security Virtual Appliance

Published 2017-09-22 · Updated 2020-08-19 · CVE-2017-11396

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Web Security Virtual Appliance version 6.5

Description The issue concerns the web service inspection of input parameters, potentially allowing attackers with administration rights to the console to implement remote code injections.

Recommendations For Trend Micro Web Security Virtual Appliance version 6.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-11396

Affected Products

Trend Micro Web Security Virtual Appliance

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-11396 · Security Note
• https://success.trendmicro.com/solution/1117412 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-11396 · Vendor Advisory