CVE-2017-14084: trend micro trend micro officescan

EPSS trend

Probability

10.13%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.13% on 20-09-2026

20-09-202620-10-2026

EPSS score

10.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotewindowsVerified
Trend Micro OfficeScan 11.0/XG (12.0) - Man In The Middle Remote Code Execution
Maturity: weaponized

References

9 links

hyp3rlinx.altervista.org/advisories/…X Refsource MISCThird Party Advisory
success.trendmicro.com/solution/1118372X Refsource CONFIRMIssue TrackingMitigationPatchVendor Advisory
www.securityfocus.com/archive/1/541275/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/101072VDB EntryX Refsource BIDThird Party Advisory
www.securityfocus.com/archive/1/541264/100/0/threadedMailing ListX Refsource BUGTRAQ
packetstormsecurity.com/files/144400/TrendMicro-OfficeScan-11.0-XG-12.0-Man-In-The-Middle.htmlX Refsource MISCThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2017/Sep/87Mailing ListX Refsource FULLDISCThird Party Advisory
www.securitytracker.com/id/1039500VDB EntryX Refsource SECTRACKThird Party Advisory
www.exploit-db.com/exploits/42891/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry

Related vulnerabilities

CVE-2018-18331trend microtrend micro officescan+11.37%7y ago21-12-2018 15:00A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations.CVE-2018-18332trend microtrend micro officescan+11.37%7y ago21-12-2018 15:00A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations.CVE-2018-10506trend microtrend micro officescan+11.04%8y ago08-06-2018 14:00A out-of-bounds read information disclosure vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to disclose sensitive information on vulnerable installations due to a flaw within the processing of IOCTL 0x220004 by the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.CVE-2018-10508trend microtrend micro officescan+11.35%8y ago12-06-2018 17:00A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to use a specially crafted URL to elevate account permissions on vulnerable installations. An attacker must already have at least guest privileges in order to exploit this vulnerability.CVE-2018-10507trend microtrend micro officescan+11.31%8y ago12-06-2018 17:00A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.CVE-2018-10359trend microtrend micro officescan+10.35%8y ago08-06-2018 14:00A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220078 in the TMWFP driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

All vulnerabilities intrend micro officescan officescan

CVE-2017-14084: trend micro trend micro officescan

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References