PT-2022-2923 · Trend Micro · Trend Micro Security

Published 2022-01-07 · Updated 2022-06-16 · CVE-2022-30703

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022

Description The issue is related to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This could also potentially be chained for privilege escalation. The vulnerability exists due to errors in system call filtering in the NCIE Scanner module of Trend Micro Security.

Recommendations For Trend Micro Security versions 2021 and 2022, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-749

Related Identifiers

BDU:2022-03524

CVE-2022-30703

ZDI-22-801

Affected Products

Trend Micro Security

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2022-30703 · Security Note
• https://helpcenter.trendmicro.com/en-us/article/tmka-11021 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-30703 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-801 · Security Note
• https://bdu.fstec.ru/vul/2022-03524 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-CAN-15757 · Note
• https://cybersecurity-help.cz/vdb/SB2022052001 · Note
• https://t.me/cibsecurity/44146 · Telegram Post