DLL Load Vulnerability in Trend Micro Vulnerability Protection Product
CVE-2020-8601

7.8HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Vulnerability Protection
Vendor
CVE Published:
20 February 2020

Summary

Trend Micro Vulnerability Protection 2.0 is susceptible to a vulnerability that allows attackers to load malicious DLL files from the product installer’s directory. This can lead to unauthorized execution of code and compromise system integrity, highlighting the importance of keeping the software updated and securing all installation directories against potential exploitation.

Affected Version(s)

Trend Micro Vulnerability Protection 2.0

References

https://success.trendmicro.com/solution/000241963
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.