Vulnerability Details CVE-2019-15628
Trend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.9
References
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124011.aspx
- https://safebreach.com/Post/Trend-Micro-Security-16-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-15628
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124011.aspx
- https://safebreach.com/Post/Trend-Micro-Security-16-DLL-Search-Order-Hijacking-and-Potential-Abuses-CVE-2019-15628
Products affected by CVE-2019-15628
-
cpe:2.3:a:trendmicro:antivirus_+_security_2020:16.0
-
cpe:2.3:a:trendmicro:antivirus_+_security_2020:16.0.1221
-
cpe:2.3:a:trendmicro:internet_security_2020:16.0
-
cpe:2.3:a:trendmicro:internet_security_2020:16.0.1146
-
cpe:2.3:a:trendmicro:internet_security_2020:16.0.1221
-
cpe:2.3:a:trendmicro:maximum_security_2020:16.0
-
cpe:2.3:a:trendmicro:maximum_security_2020:16.0.1146
-
cpe:2.3:a:trendmicro:maximum_security_2020:16.0.1221
-
cpe:2.3:a:trendmicro:premium_security_2020:16.0
-
cpe:2.3:a:trendmicro:premium_security_2020:16.0.1146
-
cpe:2.3:a:trendmicro:premium_security_2020:16.0.1221
-
cpe:2.3:o:microsoft:windows:-