CVE-2019-20358 - Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed

Back Back to CVE browser

HIGH

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed

Published Jan 30, 2020

7.8

HIGH

CVSS 3.1

EPSS 4.62%

Description

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. Another attack vector similar to CVE-2019-9491 was idenitfied and resolved in version 1.62.0.1228 of the tool.

Affected products

Vendor Trend Micro Product Trend Micro Anti-Threat Toolkit (ATTK) Default
n/a
- Version
  Version 1.62.0.1218 and below
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro

Trend Micro Anti-Threat Toolkit (ATTK)

n/a

Version	Status	Constraints
Version 1.62.0.1218 and below	affected	-

Remediation

No remediation recorded yet.

Weaknesses (3)

CWE-426

CWE-427

CWE-732

Incorrect Permission Assignment

References (3)

http://seclists.org/fulldisclosure/2020/Jan/50
mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://seclists.org/bugtraq/2020/Jan/55
x_refsource_MISCMailing ListThird Party Advisory
https://success.trendmicro.com/solution/000149878
x_refsource_MISCVendor Advisory

Link	Providers	Tags
http://seclists.org/fulldisclosure/2020/Jan/50		mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
https://seclists.org/bugtraq/2020/Jan/55		x_refsource_MISCMailing ListThird Party Advisory
https://success.trendmicro.com/solution/000149878		x_refsource_MISCVendor Advisory