Sploitus

10 exploited vulnerabilities in Trend Micro Officescan

Vulnerabilities with publicly known exploits

Vendors
Trend Micro
With known exploits
10
Affected Trendmicro Officescan versions
= 11.0, 12.0
Affected Trend Micro Client-server-messaging Security versions
= 3.0
Affected Trend Micro Officescan Corporate Edition versions
= 7.0, 7.3
Affected Trend Micro Officescan versions
= 3.0, 3.1.1, 3.5, 3.11, 3.13, 3.54, 7.3, 8.0
Affected Trend Micro Virus Buster versions
= 3.52, 3.53, 3.54
Affected Trend Micro Worry Free Business Security versions
= 5.0

Vulnerabilities with exploits

Highest CVSS first — 7 of these already have exploit code on Sploitus

CVE-2017-11394 3 exploits
CVSS 10.0 CRITICAL 2017-08-02FIX AVAILABLE
Trend Micro OfficeScan 11.0/XG (12.0) - Remote Code Execution (Metasploit)Trend Micro OfficeScan Remote Code Execution
CVE-2007-0325 6 exploits
CVSS 9.3 HIGH 2007-02-20FIX AVAILABLE
Trend Micro OfficeScan - Client ActiveX Control Buffer Overflow (Metasploit)Trend Micro OfficeScan Client ActiveX Control Buffer Overflow
CVE-2017-14084 3 exploits
CVSS 8.1 HIGH 2017-10-05FIX AVAILABLE
TrendMicro OfficeScan 11.0 / XG (12.0) Man-In-The-MiddleTrend Micro OfficeScan 11.0XG (12.0) - Man In The Middle Remote Code Execution
CVE-2017-14083 6 exploits
CVSS 7.5 HIGH 2017-10-05FIX AVAILABLE
Trend Micro OfficeScan 11.0/XG Encryption Key DisclosureTrendMicro OfficeScan 11.0 / XG (12.0) Encryption Key Disclosure
CVE-2003-1341 1 exploit
CVSS 7.5 HIGH 2003-12-31FIX AVAILABLE
Trend Micro OfficeScan 3.x - CGI Directory Insufficient Permissions
CVE-2000-0205
CVSS 6.4 MEDIUM 2000-03-03
CVE-2008-2439 2 exploits
CVSS 5.0 MEDIUM 2008-10-03FIX AVAILABLE
TrendMicro OfficeScanNT Listener Traversal Arbitrary File AccessTrendMicro OfficeScanNT Listener Traversal Arbitrary File Access
CVE-2000-0204 1 exploit
CVSS 5.0 MEDIUM 2000-02-28
Trend Micro OfficeScan Corporate Edition 3.0/3.5/3.11/3.13 - Denial of Service
CVE-2000-0203
CVSS 5.0 MEDIUM 2000-02-28
CVE-2004-2006
CVSS 4.6 MEDIUM 2004-05-07FIX AVAILABLE