CVE-2019-9491

Опубликовано: 21 окт. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 5.1

EPSS Средний

Описание

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.

Ссылки

http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt
http://packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Oct/42
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Jan/50
Exploit
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/30
Exploit
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2020/Jan/55
Exploit
Mailing List
Third Party Advisory
https://success.trendmicro.com/solution/000149878
Vendor Advisory
http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt
http://packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2019/Oct/42
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2020/Jan/50
Exploit
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2019/Oct/30
Exploit
Mailing List
Third Party Advisory
https://seclists.org/bugtraq/2020/Jan/55
Exploit
Mailing List
Third Party Advisory
https://success.trendmicro.com/solution/000149878
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:trendmicro:anti-threat_toolkit:*:*:*:*:*:*:*:*

Версия до 1.62.0.1218 (включая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.21524

Средний

7.8 High

CVSS3

5.1 Medium

CVSS2

Дефекты

CWE-427

Связанные уязвимости

GHSA-6ph9-24mm-7chj

github

больше 3 лет назад