Vulnerability Details CVE-2019-20357
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.7%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
References
- http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTENT-ARBITRARY-CODE-EXECUTION.txt
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspx
- https://seclists.org/bugtraq/2020/Jan/28
- http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTENT-ARBITRARY-CODE-EXECUTION.txt
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspx
- https://seclists.org/bugtraq/2020/Jan/28
Products affected by CVE-2019-20357
-
cpe:2.3:a:trendmicro:antivirus_+_security_2019:15.0
-
cpe:2.3:a:trendmicro:antivirus_+_security_2020:16.0
-
cpe:2.3:a:trendmicro:internet_security_2019:15.0
-
cpe:2.3:a:trendmicro:internet_security_2020:16.0
-
cpe:2.3:a:trendmicro:maximum_security_2019:15.0
-
cpe:2.3:a:trendmicro:maximum_security_2020:16.0
-
cpe:2.3:a:trendmicro:premium_security_2019:15.0
-
cpe:2.3:a:trendmicro:premium_security_2020:16.0
-
cpe:2.3:o:microsoft:windows:-