CVE-2017-14085
MEDIUM 5.3EPSS 5.7%
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules.
- Affected
- Trend Micro · Trend Micro OfficeScan
- CVSS v3.0 NVD
- 5.3 MEDIUM
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 5.65% chance of exploitation in the next 30 days, 93rd percentile
- Published
- 2017-10-05
- Updated
- 2024-08-05
Proof-of-concept exploits (2)
- http://hyp3rlinx.altervista.org/advisories/CVE-2017-14085-TRENDMICRO-OFFICESCAN-XG-REMOTE…
- http://packetstormsecurity.com/files/144402/TrendMicro-OfficeScan-11.0-XG-12.0-Informatio…
ExploitDB entries (1)
Security advisories
- https://success.trendmicro.com/solution/1118372
- http://seclists.org/fulldisclosure/2017/Sep/85
- http://www.securityfocus.com/bid/101076
- http://www.securitytracker.com/id/1039500