CVE-2017-11385

9.8 criticalEPSS 38%

Critical (9.8) in trendmicro control manager. EPSS 38% chance of exploitation in the next 30 days.

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 38% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-08-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:control_manager

References

http://www.securityfocus.com/bid/100078
http://www.securitytracker.com/id/1039049
http://www.zerodayinitiative.com/advisories/ZDI-17-495
https://success.trendmicro.com/solution/1117722
http://www.securityfocus.com/bid/100078

Check your stack JSON