{"id":"CVE-2017-11394","published":"2017-08-03T15:00:00Z","modified":"2024-09-16T16:53:36Z","title":"Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute…","vendor":"Trend Micro","product":"Trend Micro OfficeScan","tier":"core","eol":null,"affectedVersions":[{"vendor":"Trend Micro","product":"Trend Micro OfficeScan","versions":["11, XG (12)"]}],"description":{"text":"Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the T parameter within Proxy.php. Formerly ZDI-CAN-4544.","provenance":"source","from":"CVE.org"},"summary":{"text":"A proxy command injection flaw in Trend Micro OfficeScan 11 and XG (12) lives in the Proxy.php component, where the T parameter is parsed unsafely.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:19:17Z"},"cvss":null,"epss":{"score":0.66774,"percentile":0.99288,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/100130","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://success.trendmicro.com/solution/1117769","tags":["x_refsource_MISC"]},{"url":"https://www.exploit-db.com/exploits/42971/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-17-521","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-3021","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3021","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":42971,"url":"https://www.exploit-db.com/exploits/42971","title":"Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution (Metasploit)","type":"webapps","platform":"php","date":"2017-10-11","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2017-10-11"},"metasploit":[{"name":"Trend Micro OfficeScan Remote Code Execution","module":"exploit/windows/http/trendmicro_officescan_widget_exec","type":"exploit","disclosureDate":"2017-10-07","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/trendmicro_officescan_widget_exec.rb"}],"first":{"date":"2017-10-07","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/trendmicro_officescan_widget_exec.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/42971/"],"flow":[],"timeline":[{"date":"2017-08-03","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-11394","provenance":"source"},{"date":"2017-10-07","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2017-10-11","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/trendmicro_officescan_widget_exec.rb","provenance":"source"}],"speed":{"daysToPublicExploit":65,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.86,"detail":"percentile 0.9929"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}