CVE-2017-14086: Trend Micro OfficeScan

High severity, CVSS 7.5. EPSS: 7.9% chance of exploitation in the next 30 days.

Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to start the fcgiOfcDDA.exe executable or cause a potential INI corruption, which may cause the server disk space to be consumed with dump files from continuous HTTP requests.

Affected products

• Trend Micro OfficeScan: version 11.0 only; version 12.0 only

Published 2017-10-06. Last modified 2026-06-17.