CVE-2017-14095

A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command execution via a local file inclusion on a vulnerable system.

• CWE-98
• CWE-829

• http://www.securityfocus.com/bid/102275Third Party Advisory, VDB Entry
• https://success.trendmicro.com/solution/1118992Vendor Advisory
• https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilitiesExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43388/Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/102275Third Party Advisory, VDB Entry
• https://success.trendmicro.com/solution/1118992Vendor Advisory
• https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilitiesExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/43388/Third Party Advisory, VDB Entry

Published

Jan 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1409IBM Security Identity Governance Virtual Appliance 5.2 throu…5.3
• CVE-2017-14090A vulnerability in Trend Micro ScanMail for Exchange 12.0 ex…
• CVE-2017-14091A vulnerability in Trend Micro ScanMail for Exchange 12.0 ex…
• CVE-2017-14092The absence of Anti-CSRF tokens in Trend Micro ScanMail for …
• CVE-2017-14093The Log Query and Quarantine Query pages in Trend Micro Scan…
• CVE-2017-14094A vulnerability in Trend Micro Smart Protection Server (Stan…
• CVE-2017-14096A stored cross site scripting (XSS) vulnerability in Trend M…
• CVE-2017-14097An improper access control vulnerability in Trend Micro Smar…
• CVE-2017-14098In the pjsip channel driver (res_pjsip) in Asterisk 13.x bef…
• CVE-2017-14099In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 1…
• CVE-2017-14100In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14…
• CVE-2017-14101A security researcher found an XML External Entity (XXE) vul…