CVE-2017-11385

—

CVSS 3.0

9.8 critical

EPSS

39%p98

Published

Aug 2, 2017 (Aug 2, 2017)

Modified

Jun 17, 2026

Description

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545.

Vendors: trendmicro
Products: control manager
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (38.7%)

In the news0 stories

No ingested article mentions this CVE yet.