{"id":"CVE-2017-11391","published":"2017-08-03T15:00:00Z","modified":"2024-09-17T03:33:52Z","title":"Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote…","vendor":"Trend Micro","product":"Trend Micro InterScan Messaging Security Virtual Appliance","tier":"core","eol":null,"affectedVersions":[{"vendor":"Trend Micro","product":"Trend Micro InterScan Messaging Security Virtual Appliance","versions":["9.0,9.1"]}],"description":{"text":"Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the \"t\" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4744.","provenance":"source","from":"CVE.org"},"summary":{"text":"A proxy command injection flaw in the Trend Micro InterScan Messaging Security Virtual Appliance (versions 9.0 and 9.1) lies in how the modTMCSS Proxy component parses its \"t\" parameter. An attacker who can send crafted requests to a vulnerable appliance can execute arbitrary code on it.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:21:23Z"},"cvss":null,"epss":{"score":0.62132,"percentile":0.99175,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/100075","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://success.trendmicro.com/solution/1117723","tags":["x_refsource_MISC"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-17-502","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-3018","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3018","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"metasploit":[{"name":"Trend Micro InterScan Messaging Security (Virtual Appliance) Remote Code Execution","module":"exploit/linux/http/trendmicro_imsva_widget_exec","type":"exploit","disclosureDate":"2017-10-07","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trendmicro_imsva_widget_exec.rb"}],"first":{"date":"2017-10-07","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trendmicro_imsva_widget_exec.rb"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2017-08-03","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-11391","provenance":"source"},{"date":"2017-10-07","kind":"exploit-public","label":"First public exploit: Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trendmicro_imsva_widget_exec.rb","provenance":"source"}],"speed":{"daysToPublicExploit":65,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.84,"detail":"percentile 0.9918"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}