Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-6236

Опубликовано: 25 мая 2018
Источник: nvd
CVSS3: 7
CVSS2: 6.9
EPSS Низкий

Описание

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:trendmicro:antivirus\+:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:a:trendmicro:internet_security:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:a:trendmicro:maximum_security:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:a:trendmicro:premium_security:*:*:*:*:*:*:*:*
Версия до 12.0 (включая)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 14%
0.00047
Низкий

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7
github
больше 3 лет назад

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within processing of IOCTL 0x222813 by the tmusa driver. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

EPSS

Процентиль: 14%
0.00047
Низкий

7 High

CVSS3

6.9 Medium

CVSS2

Дефекты

CWE-362