CVE-2020-8607: falha em Trend Micro Anti-Threat Toolkit (ATTK)
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.6%
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.
Produtos afetados
Trend Micro · Trend Micro Anti-Threat Toolkit (ATTK)Trend Micro · Trend Micro Apex OneTrend Micro · Trend Micro Deep SecurityTrend Micro · Trend Micro HouseCallTrend Micro · Trend Micro OfficeScanTrend Micro · Trend Micro Portable SecurityTrend Micro · Trend Micro Rootkit BusterTrend Micro · Trend Micro Safe LockTrend Micro · Trend Micro Security (Consumer Family)Trend Micro · Trend Micro ServerProtectTrend Micro · Trend Micro Worry-Free Business SecurityCVEs relacionadas — Trend Micro Anti-Threat Toolkit (ATTK)
No mesmo produto, das mais perigosas para as menos.