Lucene search

TrendmicroCVE-2017-11397

HistoryDec 16, 2017 - 2:29 a.m.

CVE-2017-11397

2017-12-1602:29:07

CWE-426

trendmicro

web.nvd.nist.gov

cve-2017-11397

service dll

preloading vulnerability

trend micro encryption

remote attacker

arbitrary code

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.048

Percentile

92.8%

JSON

A service DLL preloading vulnerability in Trend Micro Encryption for Email versions 5.6 and below could allow an unauthenticated remote attacker to execute arbitrary code on a vulnerable system.

Affected configurations

Nvd

Node

trendmicroencryption_for_emailRange≤5.6.0.1073

VendorProductVersionCPE
trendmicroencryption_for_email*cpe:2.3:a:trendmicro:encryption_for_email:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendmicro	encryption_for_email	*	cpe:2.3:a:trendmicro:encryption_for_email::::::::

CNA Affected

[
  {
    "product": "Trend Micro Encryption for Email",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "5.6"
      }
    ]
  }
]

References

fortiguard.com/zeroday/FG-VD-17-079

success.trendmicro.com/solution/1118796

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.048

Percentile

92.8%

JSON

Related for CVE-2017-11397