CVE-2017-11383

Description

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560.

References

https://success.trendmicro.com/solution/1117722

https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-3010

http://www.zerodayinitiative.com/advisories/ZDI-17-493

http://www.securitytracker.com/id/1039049

http://www.securityfocus.com/bid/100078

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS