PT-2020-10221
CVE-2019-19694
·
Published
2020-02-20
·
Updated
2021-07-21
Description by
CVSS 3.1
4.7
MediumMetricsAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Trend Micro Security 2019 versions 15.0.0.1163 and below
Description
The issue allows a malicious actor to manipulate a key file during system startup, potentially disabling the product's malware protection functions or the entire product. This could result in a denial of service (DoS) attack.
Recommendations
For versions 15.0.0.1163 and below, update to a version above 15.0.0.1163 to resolve the issue. As a temporary workaround, consider implementing additional system startup security measures to prevent key file manipulation until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾