PT-2020-10394 · Trend Micro · Trend Micro Security

Hyp3Rlinx + 1 · Published 2020-01-17 · Updated 2021-07-21 · CVE-2019-20357

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 15 through 160

Description A Persistent Arbitrary Code Execution issue exists in the Trend Micro Security consumer family of products, potentially allowing an attacker to create a malicious program to escalate privileges and attain persistence on a vulnerable system.

Recommendations For versions 15 through 160, update to a version that contains a fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting access to sensitive system components to minimize the risk of privilege escalation until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-20357

Affected Products

Trend Micro Security

References · 7

• 🔥 https://seclists.org/bugtraq/2020/Jan/28 · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTENT-ARBITRARY-CODE-EXECUTION.txt · Exploit
• https://osv.dev/vulnerability/CVE-2019-20357 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20357 · Security Note
• https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspx · Vendor Advisory
• https://t.me/defcon_news/35892 · Telegram Post
• https://t.me/cvenotify/325 · Telegram Post