Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-6232

Опубликовано: 25 мая 2018
Источник: nvd
CVSS3: 7.8
CVSS2: 7.2
EPSS Низкий

Описание

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:trendmicro:antivirus\+:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 20%
0.00064
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

A buffer overflow privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x22205C by the tmnciesc.sys driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

EPSS

Процентиль: 20%
0.00064
Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-120