All the vulnerabilites related to Trend Micro, Inc. - Trend Micro Maxium Security (Consumer)
cve-2022-48191
Vulnerability from cvelistv5
Published
2023-01-18 23:07
Modified
2024-08-03 15:10
Severity ?
EPSS score ?
Summary
A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system.
References
Impacted products
▼ | Vendor | Product |
---|---|---|
Trend Micro, Inc. | Trend Micro Maxium Security (Consumer) |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T15:10:59.793Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://helpcenter.trendmicro.com/en-us/article/tmka-11252" }, { "tags": [ "x_transferred" ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-053/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Trend Micro Maxium Security (Consumer)", "vendor": "Trend Micro, Inc.", "versions": [ { "lessThan": "17.7", "status": "affected", "version": "2022 (17.7)", "versionType": "semver" } ] } ], "descriptions": [ { "lang": "en", "value": "A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowing a escalation of privileges on an affected system." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2023-01-20T05:13:20.976821Z", "orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "shortName": "trendmicro" }, "references": [ { "url": "https://helpcenter.trendmicro.com/en-us/article/tmka-11252" }, { "url": "https://www.zerodayinitiative.com/advisories/ZDI-23-053/" } ] } }, "cveMetadata": { "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "assignerShortName": "trendmicro", "cveId": "CVE-2022-48191", "datePublished": "2023-01-18T23:07:41.149Z", "dateReserved": "2022-12-30T02:27:10.986Z", "dateUpdated": "2024-08-03T15:10:59.793Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }