CVE-2019-20357 - A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system

Back Back to CVE browser

HIGH

A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system

Published Jan 17, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.73%

Description

A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.

Affected products

Vendor Trend Micro Product Trend Micro Security (Consumer) Default
unknown
Affected
- 2019 (v15) and 2020 (v16)

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Trend Micro	Trend Micro Security (Consumer)	unknown	Affected 2019 (v15) and 2020 (v16)

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-428

References (4)

http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTENT-ARBITRARY-CODE-EXECUTION.txt
x_refsource_MISCExploitThird Party Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspx
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10910
Advisory
https://seclists.org/bugtraq/2020/Jan/28
mailing-listx_refsource_BUGTRAQExploitIssue TrackingMailing ListThird Party Advisory

Link	Providers	Tags
http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTENT-ARBITRARY-CODE-EXECUTION.txt		x_refsource_MISCExploitThird Party Advisory
https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspx		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10910		Advisory
https://seclists.org/bugtraq/2020/Jan/28		mailing-listx_refsource_BUGTRAQExploitIssue TrackingMailing ListThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trendmicro

Published Jan 17, 2020

Updated Aug 5, 2024

Reserved Jan 7, 2020

Link CVE-2019-20357

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-20357

Red Hat

No data

ENISA EUVD

Assigner trendmicro

Published Jan 17, 2020

Updated Aug 5, 2024

Link EUVD-2019-10910

GitHub

No data