Lucene search

TrendmicroCVE-2022-30523

HistoryMay 16, 2022 - 3:15 p.m.

CVE-2022-30523

2022-05-1615:15:10

CWE-59

trendmicro

web.nvd.nist.gov

trend micro

password manager

vulnerability

privilege escalation

cve-2022-30523

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

15.9%

JSON

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the affected machine.

Affected configurations

Nvd

Node

trendmicropassword_managerRange<5.0.0.1270windows

VendorProductVersionCPE
trendmicropassword_manager*cpe:2.3:a:trendmicro:password_manager:*:*:*:*:*:windows:*:*

Vendor	Product	Version	CPE
trendmicro	password_manager	*	cpe:2.3:a:trendmicro:password_manager::::::windows::*

CNA Affected

[
  {
    "product": "Trend Micro Password Manager",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0.1266 and below"
      }
    ]
  }
]

References

helpcenter.trendmicro.com/en-us/article/tmka-09071

www.zerodayinitiative.com/advisories/ZDI-22-759/

Social References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

Percentile

15.9%

JSON

Related for CVE-2022-30523