CVE-2017-11382 — Resource Exposure in Micro Deep Discovery Email Inspector

CWE-668 — Resource Exposure3 documents3 sources
Severity
7.5HIGHNVD
EPSS
1.1%
top 21.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trend Micro Deep Discovery Email InspectorTrendmicro Deep Discovery Email Inspector
Timeline
PublishedAug 3
Latest updateMay 13

Description

Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

Patches

Patch: success.trendmicro.com ↗Patch: success.trendmicro.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-q5h6-fhhg-pm4c: Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2↗2022-05-13
▶
CVEList
CVE-2017-11382: Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2↗2017-08-03
▶
CVE-2017-11382 — Resource Exposure in Trend | cvebase