CVE-2019-19697 - An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start

Back Back to CVE browser

MEDIUM

An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start

Published Jan 17, 2020

6.7

MEDIUM

CVSS 3.1

EPSS 0.82%

Description

An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administrator privileges on the target machine in order to exploit the vulnerability.

Affected products

Vendor Trend Micro Product Trend Micro Security (Consumer) Default
n/a
- Version
  2019 (v15)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro

Trend Micro Security (Consumer)

n/a

Version	Status	Constraints
2019 (v15)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txt
x_refsource_MISCExploitThird Party Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124090.aspx
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9306
Advisory
https://seclists.org/bugtraq/2020/Jan/29
mailing-listx_refsource_BUGTRAQExploitMailing ListThird Party Advisory

Link	Providers	Tags
http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-SECURITY-BYPASS-PROTECTED-SERVICE-TAMPERING.txt		x_refsource_MISCExploitThird Party Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124090.aspx		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9306		Advisory
https://seclists.org/bugtraq/2020/Jan/29		mailing-listx_refsource_BUGTRAQExploitMailing ListThird Party Advisory