CVE-2017-11394

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions 11 and 12

Description The issue is caused by a command injection vulnerability in the proxy server setup during installation, allowing a remote attacker to execute arbitrary code by exploiting the T parameter in Proxy.php. This can lead to remote code execution on vulnerable installations.

Recommendations For Trend Micro OfficeScan version 11, update to a version that fixes the command injection vulnerability in the proxy server setup. For Trend Micro OfficeScan version 12, update to a version that fixes the command injection vulnerability in the proxy server setup. As a temporary workaround, consider restricting access to the Proxy.php file to minimize the risk of exploitation.