[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8diFQQZEPdB301_2g_dRHj9aHYU43-c4RlJNzFkeud4":3,"g5a-risk:CVE-2017-11392":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":75,"weaknesses":76,"weaknessesCount":85,"isActivelyExploited":86,"cisaInfo":15,"otxData":15,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":123,"notableEvents":124},"CVE-2017-11392","What is CVE-2017-11392?","Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can be exploited by parsing the \"T\" parameter within modTMCSS Proxy. Formerly ZDI-CAN-4745.","Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on v...","2017-08-03T15:29:00.357","2025-04-20T01:37:25.86",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.34092,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"trendmicro","interscan_messaging_security_virtual_appliance","9.0","cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"9.1","cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.1:*:*:*:*:*:*:*",2,[54,58,64,69,71,73],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F100075","Securityfocus",[],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-17-504","Zerodayinitiative",[62,63],"Third Party Advisory","VDB Entry",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fsuccess.trendmicro.com\u002Fsolution\u002F1117723","Trendmicro",[68],"Vendor Advisory",{"url":55,"source":56,"tags":70},[],{"url":59,"source":60,"tags":72},[62,63],{"url":65,"source":66,"tags":74},[68],6,[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-77","Improper Neutralization of Special Elements used in a Command ('Command Injection')","The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.","Many protocols and products have their own custom command language. While OS or shell command strings are frequently discovered and targeted, developers may not realize that these other command languages might also be vulnerable to attacks.","Draft","Class","Simple",1,false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2017-11392? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-11392, a high severity cyber security vulnerability from 2017. High exploit probability (34.1%). Proxy command injection v...","CVE-2017-11392, CVE-2017-11392 vulnerability, CVE-2017-11392 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, trendmicro security, interscan_messaging_security_virtual_appliance vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2017-11392",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-11392","Cybersecurity","CVE-2017-11392, CVE-2017-11392 vulnerability, CVE-2017-11392 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":15,"Negate":15,"Nodes":115},[116],{"Operator":117,"Negate":15,"CPEMatch":118},"OR",[119,121],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":120,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1E37F502-38BE-432E-B897-C57C9A39B2FC",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":122,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3BEA17C4-77A1-4C6B-8FDC-455B3FAFD90E",[],[125,132],{"id":126,"eventType":127,"eventTime":128,"details":129,"label":130,"color":131},"f29bb49b-184c-465a-8d47-10d23884a6f3","HIGH_EPSS_DELTA","2025-10-09T04:06:53.25082+00:00","Daily EPSS score increased by 0.672 on 2023-12-30","EPSS Score Increased","red",{"id":133,"eventType":134,"eventTime":135,"details":136,"label":137,"color":138},"8b86a64d-882e-4cc3-b221-a65da1af5de1","LOW_EPSS_DELTA","2026-06-16T04:06:27.279265+00:00","Daily EPSS score decreased by 0.402 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":140,"version":32},1792378578571,{"score":142,"band":143,"action":144,"scoredAt":145},57,"Medium","Plan remediation","2026-10-17T09:10:29.959021+00:00"]