PT-2022-25650 · Trend Micro · Trend Micro Enterprise Mobile Security

Published 2022-09-19 · Updated 2022-09-21 · CVE-2022-40980

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Mobile Security for Enterprise version 9.8 SP5

Description A potential unauthenticated file deletion issue could allow an attacker with access to the Management Server to delete files.

Recommendations For Trend Micro Mobile Security for Enterprise version 9.8 SP5, apply Critical Patch 2 to resolve the issue.

Fix

Related Identifiers

CVE-2022-40980

Affected Products

Trend Micro Enterprise Mobile Security

References · 5

• https://osv.dev/vulnerability/CVE-2022-40980 · Vendor Advisory
• https://files.trendmicro.com/documentation/readme/tmms_sp5_cp2/tmms-ee_9.8_sp5_patch2_readme_server.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40980 · Security Note
• https://t.me/cibsecurity/50085 · Telegram Post
• https://t.me/cvenotify/36457 · Telegram Post