Lucene search

[email protected]CVE-2020-8602

HistoryAug 27, 2020 - 9:15 p.m.

CVE-2020-8602

2020-08-2721:15:12

[email protected]

web.nvd.nist.gov

cve-2020-8602

trend micro

deep security

vulnerability protection

remote code execution

file integrity checks

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.1%

JSON

A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution.

Affected configurations

NVD

Node

microsoftwindowsMatch-

AND

trendmicrodeep_security_managerMatch10.0-

trendmicrodeep_security_managerMatch11.0-

trendmicrodeep_security_managerMatch12.0-

trendmicrovulnerability_protectionMatch2.0sp2

CPENameOperatorVersion
trendmicro:deep_security_managertrendmicro deep security managereq10.0
trendmicro:deep_security_managertrendmicro deep security managereq11.0
trendmicro:deep_security_managertrendmicro deep security managereq12.0
trendmicro:vulnerability_protectiontrendmicro vulnerability protectioneq2.0

CPE	Name	Operator	Version
trendmicro:deep_security_manager	trendmicro deep security manager	eq	10.0
trendmicro:deep_security_manager	trendmicro deep security manager	eq	11.0
trendmicro:deep_security_manager	trendmicro deep security manager	eq	12.0
trendmicro:vulnerability_protection	trendmicro vulnerability protection	eq	2.0

CNA Affected

[
  {
    "product": "Trend Micro Deep Security",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "10.0, 11.0, 12.0"
      }
    ]
  },
  {
    "product": "Trend Micro Vulnerability Management",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2.0 SP2"
      }
    ]
  }
]

References

success.trendmicro.com/solution/000252039

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.1%

JSON

Related for CVE-2020-8602

cvelist1 prion1 nvd1