Out-of-Bounds Read Vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Windows
CVE-2022-40708
3.3LOW
Key Information:
- Vendor
- Trend Micro
- Vendor
- CVE Published:
- 28 September 2022
Summary
An Out-of-bounds read vulnerability exists in Trend Micro's Deep Security 20 and the Cloud One - Workload Security Agent for Windows. This vulnerability could allow a local attacker, who has already gained low-privileged code execution on the target system, to read sensitive data from memory that should not be accessible. The issue highlights the importance of protecting system boundaries to prevent unauthorized data access. For more details, refer to the Trend Micro advisory and Zero Day Initiative reports.
Affected Version(s)
Trend Micro Deep Security 20
References
CVSS V3.1
Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved