CVE-2017-11382

EPSS 1.12%
Veröffentlicht 03.08.2017 15:29:00
Zuletzt bearbeitet 20.04.2025 01:37:25
Quelle security@trendmicro.com
CVE-Watchlists
Login
Unerledigt
Login

Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. Formerly ZDI-CAN-4350.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Trendmicro ≫ Deep Discovery Email Inspector Version2.5.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.12%	0.762

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

http://www.securityfocus.com/bid/100076

http://www.zerodayinitiative.com/advisories/ZDI-17-503

Third Party Advisory

VDB Entry

https://success.trendmicro.com/solution/1116750

Patch

Vendor Advisory

Mitigation

https://nvd.nist.gov/vuln/detail/CVE-2017-11382

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-11382

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-11382

EUVD