Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2017-14083

4 documents4 sources
Severity
7.5HIGH
EPSS
12.9%
top 5.93%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Trend Micro Trend Micro OfficescanTrendmicro Officescan
Timeline
PublishedOct 6
Latest updateMay 13

Description

A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDtrendmicro/officescan11.0, 12.0+1
▶CVEListV5trend_micro/trend_micro_officescan11.0, XG (12.0)

Patches

Patch: success.trendmicro.com ↗Patch: success.trendmicro.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w8f8-wc6c-j6cx: A vulnerability in Trend Micro OfficeScan 11↗2022-05-13
▶
CVEList
CVE-2017-14083: A vulnerability in Trend Micro OfficeScan 11↗2017-10-05
▶

💥Exploits & PoCs

1
Exploit-DB
Trend Micro OfficeScan 11.0/XG (12.0) - Private Key Disclosure↗2017-09-28
▶
CVE-2017-14083 (HIGH CVSS 7.5) | A vulnerability in Trend Micro Offi | cvebase.io