CVE-2017-14078
SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbi
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrary code on vulnerable installations.
Timeline
- CVE published
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- Trend Micro Mobile Security (Enterprise)
< 9.7 Patch 3
References 25
zerodayinitiative.com
- advisories/ZDI-17-766
- advisories/ZDI-17-769
- advisories/ZDI-17-770
- advisories/ZDI-17-809
- advisories/ZDI-17-744
- advisories/ZDI-17-742
- advisories/ZDI-17-787
- advisories/ZDI-17-800
- advisories/ZDI-17-773
- advisories/ZDI-17-778
- advisories/ZDI-17-763
- advisories/ZDI-17-764
- advisories/ZDI-17-747
- advisories/ZDI-17-771
- advisories/ZDI-17-805
- advisories/ZDI-17-739
- advisories/ZDI-17-806
- advisories/ZDI-17-783
- advisories/ZDI-17-780
- advisories/ZDI-17-788
- advisories/ZDI-17-749
- advisories/ZDI-17-804
- advisories/ZDI-17-759
- advisories/ZDI-17-803
- advisories/ZDI-17-757