CVE-2017-11395

PoC —

CVSS 3.0

8.8 high

EPSS

14%p96

Published

Sep 22, 2017 (Sep 22, 2017)

Modified

Jun 17, 2026

Description

Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers with authenticated access to execute arbitrary code on vulnerable installations.

Vendors: trendmicro
Products: smart protection server
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.1%)

In the news0 stories

No ingested article mentions this CVE yet.