PT-2020-14526 · Trend Micro · Trend Micro Security 2020

Shahee Mirza + 1 · Published 2020-07-15 · Updated 2020-07-22 · CVE-2020-15602

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Secuity 2020 versions 16.0.0.1146 and below

Description An untrusted search path remote code execution issue could allow an attacker to run arbitrary code on a vulnerable system. The Trend Micro installer tries to load DLL files from its current directory, which could allow an arbitrary DLL to be loaded with the same privileges as the installer if run as Administrator. User interaction is required to exploit the issue, where the target must open a malicious directory or device.

Recommendations For versions 16.0.0.1146 and below, consider restricting the privileges of the Trend Micro installer to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid running the installer as Administrator. Additionally, be cautious when opening directories or devices from untrusted sources to reduce the risk of loading malicious DLL files. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2020-15602

Affected Products

Trend Micro Security 2020

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-15602 · Security Note
• https://helpcenter.trendmicro.com/en-us/article/TMKA-09644 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15602 · Vendor Advisory
• https://t.me/cvenotify/5077 · Telegram Post