CVE-2019-20358
—CVSS 3.1
7.8 high
EPSS
5%p91
Published
()
Modified
Description
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. Another attack vector similar to CVE-2019-9491 was idenitfied and resolved in version 1.62.0.1228 of the tool.
- Vendors
- trendmicro
- Products
- anti-threat toolkit
- Weakness
- CWE-426, CWE-427, CWE-732
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.