OS command injection in Trend Micro Deep Security
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-78.
Summary
A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to remotely inject commands to other machines in the same domain. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability locally and must have domain user privileges to affect other machines.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Trend Micro | Trend Micro Deep Security | 20 to before 20.0.1-21510 | 20.0.1-21510 | Patch available | CNA |
- Trend Micro Deep Security VendorTrend Micro Affected 20 to before 20.0.1-21510 Fixed in 20.0.1-21510 Patch available CNA
CPE configurations NVD · 64
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:-:*:*:long_term_support:*:*:* | 20.0 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:* | 20.0 update1337 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:* | 20.0 update1559 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update158:*:*:long_term_support:*:*:* | 20.0 update158 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update167:*:*:long_term_support:*:*:* | 20.0 update167 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:* | 20.0 update1681 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update173:*:*:long_term_support:*:*:* | 20.0 update173 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update180:*:*:long_term_support:*:*:* | 20.0 update180 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update182:*:*:long_term_support:*:*:* | 20.0 update182 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:* | 20.0 update1822 | Vulnerable | Trendmicro |
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:-:*:*:long_term_support:*:*:* Versions 20.0 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:* Versions 20.0 update1337 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:* Versions 20.0 update1559 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update158:*:*:long_term_support:*:*:* Versions 20.0 update158 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update167:*:*:long_term_support:*:*:* Versions 20.0 update167 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:* Versions 20.0 update1681 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update173:*:*:long_term_support:*:*:* Versions 20.0 update173 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update180:*:*:long_term_support:*:*:* Versions 20.0 update180 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update182:*:*:long_term_support:*:*:* Versions 20.0 update182 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:* Versions 20.0 update1822 Vulnerable ·Trendmicro
Show 54 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update183:*:*:long_term_support:*:*:* | 20.0 update183 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:* | 20.0 update1876 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update190:*:*:long_term_support:*:*:* | 20.0 update190 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update198:*:*:long_term_support:*:*:* | 20.0 update198 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:* | 20.0 update2009 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update208:*:*:long_term_support:*:*:* | 20.0 update208 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update213:*:*:long_term_support:*:*:* | 20.0 update213 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:* | 20.0 update2204 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update223:*:*:long_term_support:*:*:* | 20.0 update223 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update224:*:*:long_term_support:*:*:* | 20.0 update224 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:* | 20.0 update2395 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2419:*:*:long_term_support:*:*:* | 20.0 update2419 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:* | 20.0 update2593 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:* | 20.0 update2740 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:* | 20.0 update2921 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:* | 20.0 update3165 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:* | 20.0 update3288 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:* | 20.0 update3445 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3530:*:*:long_term_support:*:*:* | 20.0 update3530 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3771:*:*:long_term_support:*:*:* | 20.0 update3771 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:* | 20.0 update3964 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:* | 20.0 update4185 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:* | 20.0 update4416 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:* | 20.0 update4726 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:* | 20.0 update4959 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:* | 20.0 update5137 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:* | 20.0 update5394 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:* | 20.0 update5512 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:* | 20.0 update5761 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5810:*:*:long_term_support:*:*:* | 20.0 update5810 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5995:*:*:long_term_support:*:*:* | 20.0 update5995 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:* | 20.0 update6313 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6690:*:*:long_term_support:*:*:* | 20.0 update6690 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6860:*:*:long_term_support:*:*:* | 20.0 update6860 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update690:*:*:long_term_support:*:*:* | 20.0 update690 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:* | 20.0 update7119 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:* | 20.0 update7303 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:* | 20.0 update7476 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:* | 20.0 update7719 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:* | 20.0 update7943 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:* | 20.0 update8137 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:* | 20.0 update8268 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:* | 20.0 update8438 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:* | 20.0 update877 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:*:*:*:long_term_support:*:*:* | 20.0.1 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update12510:*:*:long_term_support:*:*:* | 20.0.1 update12510 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update14610:*:*:long_term_support:*:*:* | 20.0.1 update14610 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update17380:*:*:long_term_support:*:*:* | 20.0.1 update17380 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update19250:*:*:long_term_support:*:*:* | 20.0.1 update19250 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update3180:*:*:long_term_support:*:*:* | 20.0.1 update3180 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update4540:*:*:long_term_support:*:*:* | 20.0.1 update4540 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:* | 20.0.1 update690 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update7380:*:*:long_term_support:*:*:* | 20.0.1 update7380 | Vulnerable | Trendmicro |
| cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update9400:*:*:long_term_support:*:*:* | 20.0.1 update9400 | Vulnerable | Trendmicro |
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update183:*:*:long_term_support:*:*:* Versions 20.0 update183 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:* Versions 20.0 update1876 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update190:*:*:long_term_support:*:*:* Versions 20.0 update190 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update198:*:*:long_term_support:*:*:* Versions 20.0 update198 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:* Versions 20.0 update2009 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update208:*:*:long_term_support:*:*:* Versions 20.0 update208 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update213:*:*:long_term_support:*:*:* Versions 20.0 update213 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:* Versions 20.0 update2204 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update223:*:*:long_term_support:*:*:* Versions 20.0 update223 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update224:*:*:long_term_support:*:*:* Versions 20.0 update224 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:* Versions 20.0 update2395 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2419:*:*:long_term_support:*:*:* Versions 20.0 update2419 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:* Versions 20.0 update2593 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:* Versions 20.0 update2740 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:* Versions 20.0 update2921 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:* Versions 20.0 update3165 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:* Versions 20.0 update3288 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:* Versions 20.0 update3445 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3530:*:*:long_term_support:*:*:* Versions 20.0 update3530 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3771:*:*:long_term_support:*:*:* Versions 20.0 update3771 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:* Versions 20.0 update3964 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:* Versions 20.0 update4185 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:* Versions 20.0 update4416 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:* Versions 20.0 update4726 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:* Versions 20.0 update4959 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:* Versions 20.0 update5137 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:* Versions 20.0 update5394 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:* Versions 20.0 update5512 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:* Versions 20.0 update5761 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5810:*:*:long_term_support:*:*:* Versions 20.0 update5810 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5995:*:*:long_term_support:*:*:* Versions 20.0 update5995 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:* Versions 20.0 update6313 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6690:*:*:long_term_support:*:*:* Versions 20.0 update6690 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6860:*:*:long_term_support:*:*:* Versions 20.0 update6860 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update690:*:*:long_term_support:*:*:* Versions 20.0 update690 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:* Versions 20.0 update7119 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:* Versions 20.0 update7303 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:* Versions 20.0 update7476 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:* Versions 20.0 update7719 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:* Versions 20.0 update7943 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:* Versions 20.0 update8137 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:* Versions 20.0 update8268 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:* Versions 20.0 update8438 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:* Versions 20.0 update877 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:*:*:*:long_term_support:*:*:* Versions 20.0.1 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update12510:*:*:long_term_support:*:*:* Versions 20.0.1 update12510 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update14610:*:*:long_term_support:*:*:* Versions 20.0.1 update14610 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update17380:*:*:long_term_support:*:*:* Versions 20.0.1 update17380 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update19250:*:*:long_term_support:*:*:* Versions 20.0.1 update19250 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update3180:*:*:long_term_support:*:*:* Versions 20.0.1 update3180 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update4540:*:*:long_term_support:*:*:* Versions 20.0.1 update4540 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:* Versions 20.0.1 update690 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update7380:*:*:long_term_support:*:*:* Versions 20.0.1 update7380 Vulnerable ·Trendmicro
- cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update9400:*:*:long_term_support:*:*:* Versions 20.0.1 update9400 Vulnerable ·Trendmicro
Remediation
- Fix · CNA Trend Micro Deep Security (Trend Micro, Inc.) Fixed in 20.0.1-21510
Timeline
- 2026-10-02 Threatist record created from CVE-2024-51503
- 2026-10-03 Alias added: GHSA-w7p8-rxjg-j7wx
References
More Trend Micro vulnerabilities
- TI-2025-34668 OS command injection in Trend Micro Apex One KEVCVSS 3.1CRITICAL 9.8
- TI-2022-10115 Insufficient verification of data authenticity in Trend Micro Apex Central KEVCVSS 3.1CRITICAL 9.8
- TI-2020-06895 Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that… KEVCVSS 3.1CRITICAL 9.8
- TI-2021-14867 Unrestricted file upload in Trend Micro Apex One KEVCVSS 3.1HIGH 8.8
- TI-2020-06795 Injection in Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free… KEVCVSS 3.1HIGH 8.8
- TI-2020-06794 A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a… KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2024-51503 · CVE Program
- CVE-2024-51503 · NVD
- FIRST EPSS
- GHSA-w7p8-rxjg-j7wx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences