« Volver al listado

CVE-2023-28929

Estado: ModificadaAlta (7.8)—

Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (12)

Trendmicro — Antivirus+ Security 2021Trendmicro — Antivirus+ Security 2022Trendmicro — Antivirus+ Security 2023Trendmicro — Internet Security 2021Trendmicro — Internet Security 2022Trendmicro — Internet Security 2023Trendmicro — Maximum Security 2021Trendmicro — Maximum Security 2022Trendmicro — Maximum Security 2023Trendmicro — Premium Security 2021Trendmicro — Premium Security 2022Trendmicro — Premium Security 2023

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-28929",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-28929",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-12-05T15:42:15.626436Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@trendmicro.com",
      "affectedData": [
        {
          "vendor": "Trend Micro, Inc.",
          "product": "Trend Micro Security (Consumer)",
          "versions": [
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "17.7.1634",
              "versionType": "semver"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:trend_micro_inc:trend_micro_security:*:*:*:*:*:*:*:*"
          ],
          "vendor": "trend_micro_inc",
          "product": "trend_micro_security",
          "versions": [
            {
              "status": "affected",
              "version": "2023",
              "lessThan": "17.7.1634",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-06-26T22:15:09.733",
  "references": [
    {
      "url": "https://helpcenter.trendmicro.com/en-us/article/tmka-19062",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://helpcenter.trendmicro.com/en-us/article/tmka-19062",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an execution and/or persistence mechanism which could execute a malicious program each time the executable file is started."
    }
  ],
  "lastModified": "2026-06-17T05:49:01.880",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trendmicro:antivirus\\+_security_2021:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE0F9724-D955-435A-AA01-88DC5D097202",
              "versionEndIncluding": "17.0.1412"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:internet_security_2021:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "98F87CB2-043E-4840-9BDB-94DEADDB45B5",
              "versionEndIncluding": "17.0.1412"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:maximum_security_2021:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52BED273-F568-44A6-A4E6-EA47DEE456AA",
              "versionEndIncluding": "17.0.1412"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:premium_security_2021:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD1356F4-D159-4B8B-826C-4924BD2704C2",
              "versionEndIncluding": "17.0.1412"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trendmicro:antivirus\\+_security_2022:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D6FC368-0C19-4305-B795-C6B8D1762C04",
              "versionEndIncluding": "17.7.1476"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:internet_security_2022:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF1430D6-5373-4B65-A178-3F9AA3BC59F7",
              "versionEndIncluding": "17.7.1476"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:maximum_security_2022:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA389598-92CB-4FD5-8589-B4BDC8E6B304",
              "versionEndIncluding": "17.7.1476"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:premium_security_2022:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF3517E4-310E-4018-8AAF-79276A1FBD27",
              "versionEndIncluding": "17.7.1476"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trendmicro:antivirus\\+_security_2023:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35E7CA3C-D4DF-4AAF-95FE-797B2D39A96D",
              "versionEndIncluding": "17.7.1476"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:internet_security_2023:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6C50CA3-D54A-4C3D-9FE3-0CB2D112A488",
              "versionEndIncluding": "17.7.1476"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:maximum_security_2023:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2A9A81B-252B-463D-BD28-7EF505009468",
              "versionEndIncluding": "17.7.1476"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:premium_security_2023:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90E3DEF9-B144-441A-8A00-BC1D4EAD9DB0",
              "versionEndIncluding": "17.7.1476"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@trendmicro.com"
}