hyp3rlinx.altervista.org
http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-%28ATTK%29-REMOTE-CODE-EXECUTION.txt CVE-2019-9491
HIGH
Trend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code Execution
Record summary
CVE-2019-9491 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit.
Description
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Trend Micro Anti-Threat Toolkit (ATTK)Browse Trend Micro / Trend Micro Anti-Threat Toolkit (ATTK) | CVE List | Version 1.62.0.1218 and below | affected |
Proofs of concept
1Catalogued exploits
ExploitDBTrend Micro Anti-Threat Toolkit 1.62.0.1218 - Remote Code ExecutionExploitDB exploitby hyp3rlinxNot analyzed1 file
References
9hyp3rlinx.altervista.org
http://hyp3rlinx.altervista.org/advisories/TREND-MICRO-ANTI-THREAT-TOOLKIT-(ATTK)-REMOTE-CODE-EXECUTION.txt packetstormsecurity.com
http://packetstormsecurity.com/files/156160/TrendMicro-Anti-Threat-Toolkit-Improper-Fix.html 20191022 Trend Micro Anti-Threat Toolkit (ATTK) <= v1.62.0.1218 Remote Code Execution 0day CVE-2019-9491mailing list
http://seclists.org/fulldisclosure/2019/Oct/42 20200131 [CVE-2019-20358] CVE-2019-9491 in Trend Micro Anti-Threat Toolkit (ATTK) was NOT properly FIXEDmailing list
http://seclists.org/fulldisclosure/2020/Jan/50 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-9491 20191021 Trend Micro Anti-Threat Toolkit <= v1.62.0.1218 / Remote Code Execution 0daymailing list
https://seclists.org/bugtraq/2019/Oct/30 20200130 [CVE-2019-20358] CVE-2019-9491 in Trend Micro Anti-Threat Toolkit (ATTK) was NOT properly FIXEDmailing list
https://seclists.org/bugtraq/2020/Jan/55 success.trendmicro.com
https://success.trendmicro.com/solution/000149878