Vulnerability Details CVE-2017-14081
Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.133
EPSS Ranking 93.8%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- http://www.securityfocus.com/bid/100969
- http://www.zerodayinitiative.com/advisories/ZDI-17-752
- http://www.zerodayinitiative.com/advisories/ZDI-17-774
- https://success.trendmicro.com/solution/1118224
- http://www.securityfocus.com/bid/100969
- http://www.zerodayinitiative.com/advisories/ZDI-17-752
- http://www.zerodayinitiative.com/advisories/ZDI-17-774
- https://success.trendmicro.com/solution/1118224
Products affected by CVE-2017-14081
-
cpe:2.3:a:trendmicro:mobile_security:9.7