Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2017-11383: Trend Micro Control Manager 6.0 allows attackers to execute malicious code
CVE-2017-11383 · published 9 years ago
Summary
Trend Micro Control Manager 6.0 has a security weakness that could let attackers take control of a computer by exploiting poorly validated user input. This could happen if an attacker sends malicious data to the software, potentially causing harm to the system. To protect your system, update to the latest version of Trend Micro Control Manager.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| trendmicro | control_manager |
6.0 cpe:2.3:a:trendmicro:control_manager:6.0:*:*:*:*:*:*:* |
Original advisory text
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-C...
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack of proper user input validation in cmdHandlerTVCSCommander.dll. Formerly ZDI-CAN-4560.
References
- http://www.securityfocus.com/bid/100078
- http://www.securitytracker.com/id/1039049
- http://www.zerodayinitiative.com/advisories/ZDI-17-493 Third Party Advisory VDB Entry
- https://success.trendmicro.com/solution/1117722 Patch Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-89SQL Injection
Timeline
Published2 Aug 2017
Updated29 Sep 2026
First seen14 Mar 2026
Track software like this
Free during beta