CVE-2017-11386

—

CVSS 3.0

9.8 critical

EPSS

24%p98

Published

Aug 2, 2017 (Aug 2, 2017)

Modified

Jun 17, 2026

Description

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in cmdHandlerNewReportScheduler.dll. Formerly ZDI-CAN-4549.

Vendors: trendmicro
Products: control manager
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (24.1%)

In the news0 stories

No ingested article mentions this CVE yet.