CVE-2017-11385 SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-...
CriticalCVSS 9.8
EPSS 38.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro control manager | = 6.0 | No fix listed |
References
- 100078 vdb-entry
- 1039049 vdb-entry
- www.zerodayinitiative.com third-party-advisory vdb-entry
- success.trendmicro.com patch vendor-advisory