PT-2019-13781 · Trend Micro · Trend Micro Security 2019

Publicado 2019-08-21 · Atualizado 2020-08-24 · CVE-2019-14685

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 version 15.0

Description A local privilege escalation issue exists, allowing an attacker to manipulate a specific product feature to load a malicious service.

Recommendations For Trend Micro Security 2019 version 15.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

LPE

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-14685

Produtos afetados

Trend Micro Security 2019

Referências · 6

• https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68 · Nota
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123420.aspx · Aviso do Fabricante
• http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html · Nota
• https://osv.dev/vulnerability/CVE-2019-14685 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14685 · Nota de Segurança
• http://seclists.org/fulldisclosure/2019/Aug/26 · Nota