CVE-2017-9035 Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
HighCVSS 7.4
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro serverprotect | = 3.0 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20170523 [CORE-2017-0002] - Trend Micro ServerProtect Multiple Vulnerabilities exploit mailing-list third-party-advisory
- 1038548 third-party-advisory vdb-entry
- success.trendmicro.com patch vendor-advisory
- www.coresecurity.com exploit technical-description third-party-advisory