Trend Micro Security 2020 up to 16.0.0.1146 Search Path untrusted search path

Summaryinfo

A vulnerability was found in Trend Micro Security 2020 up to 16.0.0.1146. It has been rated as critical. Affected by this vulnerability is an unknown functionality. The manipulation as part of Search Path leads to untrusted search path. This vulnerability is listed as CVE-2020-15602. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in Trend Micro Security 2020 up to 16.0.0.1146. It has been rated as critical. This issue affects an unknown function. The manipulation as part of a Search Path leads to a untrusted search path vulnerability. Using CWE to declare the problem leads to CWE-426. The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family of products could allow an attacker to run arbitrary code on a vulnerable system. As the Trend Micro installer tries to load DLL files from its current directory, an arbitrary DLL could also be loaded with the same privileges as the installer if run as Administrator. User interaction is required to exploit the vulnerbaility in that the target must open a malicious directory or device.

The weakness was presented 07/15/2020 (Website). It is possible to read the advisory at helpcenter.trendmicro.com. The identification of this vulnerability is CVE-2020-15602 since 07/07/2020. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 07/16/2020). The attack technique deployed by this issue is T1574 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-158544 for similar entry. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Trend Micro

Name

• Security 2020

Version

• 16.0.0.1146

License

• commercial

Website

• Vendor: https://www.trendmicro.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion