7.8
CVE-2022-23120
- EPSS 6.38%
- Veröffentlicht 20.01.2022 19:15:07
- Zuletzt bearbeitet 21.11.2024 06:48:02
- Erkennungen
LoginA code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trendmicro ≫ Deep Security Agent SwEdition long_term_support Version >= 20.0 < 20.0.0-3445
Trendmicro ≫ Deep Security Agent Version 10.0 Update - SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update1 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update10 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update11 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update12 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update13 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update14 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update15 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update16 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update17 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update18 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update19 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update2 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update20 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update21 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update22 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update23 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update24 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update25 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update26 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update27 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update28 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update29 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update3 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update30 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update31 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update4 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update5 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update6 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update7 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update8 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 10.0 Update update9 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update - SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update1 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update10 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update11 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update12 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update13 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update14 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update15 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update16 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update17 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update18 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update19 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update2 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update20 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update21 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update22 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update23 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update24 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update25 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update26 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update27 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update3 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update4 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update5 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update6 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update7 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update8 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 11.0 Update update9 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update - SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update1 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update10 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update11 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update12 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update13 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update14 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update15 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update16 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update17 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update18 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update19 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update2 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update20 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update21 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update3 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update4 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update5 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update6 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update7 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update8 SwEdition long_term_support
Trendmicro ≫ Deep Security Agent Version 12.0 Update update9 SwEdition long_term_support
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.38% | 0.928 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 6.9 | 3.4 | 10 |
AV:L/AC:M/Au:N/C:C/I:C/A:C
|
CWE-94 Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
https://success.trendmicro.com/solution/000290104
https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt