PT-2019-13781 · Trend Micro · Trend Micro Security 2019

Published 2019-08-21 · Updated 2020-08-24 · CVE-2019-14685

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Security 2019 version 15.0

Description A local privilege escalation issue exists, allowing an attacker to manipulate a specific product feature to load a malicious service.

Recommendations For Trend Micro Security 2019 version 15.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

LPE

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-14685

Affected Products

Trend Micro Security 2019

References · 6

• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123420.aspx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14685 · Security Note
• https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68 · Note
• http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html · Note
• http://seclists.org/fulldisclosure/2019/Aug/26 · Note