PT-2020-20232

CVE-2020-8602

·

Published

2020-08-27

·

Updated

2021-07-21

Description by

CVSS 3.1
7.2
High
MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security versions 10.0 through 12.0 Trend Micro Vulnerability Protection version 2.0 SP2
Description A vulnerability in the management consoles may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution.
Recommendations For Trend Micro Deep Security versions 10.0 through 12.0, update to a version that includes a fix for this issue. For Trend Micro Vulnerability Protection version 2.0 SP2, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the management consoles to minimize the risk of exploitation.
Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾