Vulnerability Description
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Antivirus \+ Security 2019 | 15.0 |
| Trendmicro | Antivirus \+ Security 2020 | 16.0 |
| Trendmicro | Internet Security 2019 | 15.0 |
| Trendmicro | Internet Security 2020 | 16.0 |
| Trendmicro | Maximum Security 2019 | 15.0 |
| Trendmicro | Maximum Security 2020 | 16.0 |
| Trendmicro | Premium Security 2019 | 15.0 |
| Trendmicro | Premium Security 2020 | 16.0 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTExploitThird Party Advisory
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspxVendor Advisory
- https://seclists.org/bugtraq/2020/Jan/28ExploitIssue TrackingMailing List
- http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-SECURITY-CONSUMER-PERSISTExploitThird Party Advisory
- https://esupport.trendmicro.com/en-us/home/pages/technical-support/1124099.aspxVendor Advisory
- https://seclists.org/bugtraq/2020/Jan/28ExploitIssue TrackingMailing List
FAQ
What is CVE-2019-20357?
CVE-2019-20357 is a vulnerability with a CVSS score of 7.8 (HIGH). A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to c...
How severe is CVE-2019-20357?
CVE-2019-20357 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-20357?
Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Antivirus \+ Security 2019, Trendmicro Antivirus \+ Security 2020, Trendmicro Internet Security 2019, Trendmicro Internet Security 2020, Trendmicro Maximum Security 2019.