Privilege Escalation Vulnerability in Trend Micro Worry-Free Business Security
CVE-2021-44020
7.8HIGH
Key Information:
- Vendor
- Trend Micro
- Vendor
- CVE Published:
- 3 December 2021
Summary
A local attacker with access to execute low-privileged code on affected installations of Trend Micro Worry-Free Business Security 10.0 SP1 can exploit an unnecessary privilege vulnerability. This could result in unauthorized access to higher-level permissions, allowing the attacker to manipulate system functions and potentially compromise the security of the targeted system. This issue is closely related to other vulnerabilities in the same family but has distinct characteristics.
Affected Version(s)
Trend Micro Worry-Free Business Security 10.0 SP1
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved