CVE-2019-14685

Опубликовано: 21 авг. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

A local privilege escalation vulnerability exists in Trend Micro Security 2019 (v15.0) in which, if exploited, would allow an attacker to manipulate a specific product feature to load a malicious service.

Ссылки

http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Aug/26
Mailing List
Third Party Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123420.aspx
Vendor Advisory
https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68
Third Party Advisory
http://packetstormsecurity.com/files/154200/Trend-Maximum-Security-2019-Unquoted-Search-Path.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Aug/26
Mailing List
Third Party Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1123420.aspx
Vendor Advisory
https://medium.com/sidechannel-br/vulnerabilidade-no-trend-micro-maximum-security-2019-permite-a-escala%C3%A7%C3%A3o-de-privil%C3%A9gios-no-windows-471403d53b68
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:trendmicro:antivirus_\+_security_2019:15.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:internet_security_2019:15.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:maximum_security_2019:15.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:premium_security_2019:15.0:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00101

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-428

Связанные уязвимости

GHSA-vvp7-94rj-24rc

github

больше 3 лет назад