CRITICAL🇬🇧 English

CVE-2017-9034

CVSS 9.8v3.1pub. 2017-05-26upd. 2026-05-13

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Trendmicro Serverprotect

    APP
    Trendmicro
    3.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2022-25330CRITICAL9.8ten sam produkt

Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a r...

CVE-2022-25329CRITICAL9.8ten sam produkt

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a...

CVE-2021-36745CRITICAL9.8ten sam produkt

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect...

CVE-2020-24561CRITICAL9.1ten sam produkt

A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execut...

CVE-2022-25331HIGH7.5ten sam produkt

Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could all...