Trend Micro Vulnerabilities and Affected Products
Vulnerabilities associated with Trend Micro Anti-Threat Toolkit (ATTK).
Products
Clear product- Trend Micro Apex One81 vulnerabilities
- Trend Micro OfficeScan53 vulnerabilities
- Trend Micro Worry-Free Business Security46 vulnerabilities
- Trend Micro Security (Consumer)27 vulnerabilities
- Trend Micro Email Encryption Gateway18 vulnerabilities
- Trend Micro InterScan Web Security Virtual Appliance16 vulnerabilities
- Trend Micro Antivirus for Mac (Consumer)12 vulnerabilities
- Trend Micro Control Manager11 vulnerabilities
- Trend Micro Password Manager10 vulnerabilities
- Trend Micro Deep Security8 vulnerabilities
- Trend Micro Smart Protection Server (Standalone)8 vulnerabilities
- Trend Micro HouseCall for Home Networks6 vulnerabilities
- Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA)6 vulnerabilities
- Trend Micro Maximum Security6 vulnerabilities
- Trend Micro Antivirus for Mac5 vulnerabilities
- Trend Micro Home Network Security5 vulnerabilities
- Trend Micro ServerProtect for Linux5 vulnerabilities
- Trend Micro ServerProtect for EMC Celerra4 vulnerabilities
- Trend Micro ServerProtect for Microsoft Windows / Novell NetWare4 vulnerabilities
- Trend Micro ServerProtect for Network Appliance Filers4 vulnerabilities
- Trend Micro ServerProtect for Storage4 vulnerabilities
- Apex One and Apex One as a Service3 vulnerabilities
- Mobile Security (Enterprise)3 vulnerabilities
- Trend Micro Anti-Threat Toolkit (ATTK)3 vulnerabilities
- Trend Micro InterScan Messaging Security Virtual Appliance3 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2020-8607MEDIUM | An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vu… CWE-20Aug 5, 2020 | CVSS6.7v3.1 | EPSS0.656% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-20358HIGH | Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. Another attack vector similar to CVE-2019-9491 was idenitfied and resolved in version 1.62.0.1228 of the tool. | CVSS7.8v3.1 | EPSS4.62% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2019-9491HIGH | Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code ExecutionTrend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. | CVSS7.8v3.1 | EPSS12.9% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |