Lucene search

TrendmicroCVE-2019-14684

HistoryAug 20, 2019 - 2:15 p.m.

CVE-2019-14684

2019-08-2014:15:11

CWE-427

trendmicro

web.nvd.nist.gov

trend micro

password manager

dll hijacking

vulnerability

cve-2019-14684

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

A DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited, would allow an attacker to load an arbitrary unsigned DLL into the signed service’s process. This process is very similar, yet not identical to CVE-2019-14687.

Affected configurations

Nvd

Node

trendmicropassword_managerMatch5.0

VendorProductVersionCPE
trendmicropassword_manager5.0cpe:2.3:a:trendmicro:password_manager:5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendmicro	password_manager	5.0	cpe:2.3:a:trendmicro:password_manager:5.0:::::::*

CNA Affected

[
  {
    "product": "Trend Micro Password Manager",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019 (5.0)"
      }
    ]
  }
]

References

esupport.trendmicro.com/en-us/home/pages/technical-support/1123396.aspx

safebreach.com/Post/Trend-Micro-Password-Manager-Privilege-Escalation-to-SYSTEM

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

40.6%

JSON

Related for CVE-2019-14684