« Volver al listado

CVE-2020-8607

Estado: ModificadaMedia (6.7)—

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (12)

Trendmicro — Antivirus ToolkitTrendmicro — Apex ONETrendmicro — Deep SecurityTrendmicro — OfficescanTrendmicro — Officescan Business SecurityTrendmicro — Officescan Business Security ServiceTrendmicro — Officescan CloudTrendmicro — Online ScanTrendmicro — Portable SecurityTrendmicro — Rootkit BusterTrendmicro — Safe LockTrendmicro — Serverprotect

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-8607",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@trendmicro.com",
      "affectedData": [
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Apex One",
          "versions": [
            {
              "status": "affected",
              "version": "2019 (On premise), SaaS"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro OfficeScan",
          "versions": [
            {
              "status": "affected",
              "version": "XG SP1"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Deep Security",
          "versions": [
            {
              "status": "affected",
              "version": "12.x, 11.x. 10.x"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Worry-Free Business Security",
          "versions": [
            {
              "status": "affected",
              "version": "10.0 SP1, Services (SaaS)"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Security (Consumer Family)",
          "versions": [
            {
              "status": "affected",
              "version": "2020 (v16), 2019 (v15)"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Safe Lock",
          "versions": [
            {
              "status": "affected",
              "version": "2.0 SP1, TXOne Ed"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro ServerProtect",
          "versions": [
            {
              "status": "affected",
              "version": "SPFS 6.0, SPNAF 5.8, SPEMC 5.8, SPNT 5.8"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Portable Security",
          "versions": [
            {
              "status": "affected",
              "version": "3.x, 2.x"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro HouseCall",
          "versions": [
            {
              "status": "affected",
              "version": "8.0"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Anti-Threat Toolkit (ATTK)",
          "versions": [
            {
              "status": "affected",
              "version": "1.62.1240 and below"
            }
          ]
        },
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Rootkit Buster",
          "versions": [
            {
              "status": "affected",
              "version": "2.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-08-05T14:15:13.530",
  "references": [
    {
      "url": "https://jvn.jp/en/vu/JVNVU99160193/index.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://jvn.jp/vu/JVNVU99160193/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://success.trendmicro.com/jp/solution/000260748",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://success.trendmicro.com/solution/000260713",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://jvn.jp/en/vu/JVNVU99160193/index.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://jvn.jp/vu/JVNVU99160193/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://success.trendmicro.com/jp/solution/000260748",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://success.trendmicro.com/solution/000260713",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de comprobación de entrada que se encuentra en varios productos de Trend Micro que usan una versión particular de un controlador de protección de rootkit específico, podría permitir a un atacante en modo usuario con permisos de administrador abusar del controlador para modificar una dirección del kernel que puede causar un bloqueo del sistema o potencialmente conllevar a una ejecución de código en modo kernel. Un atacante ya debe haber obtenido acceso de administrador en la máquina de destino (legítimamente o mediante un ataque no relacionado separado) para explotar esta vulnerabilidad"
    }
  ],
  "lastModified": "2026-06-17T03:26:38.170",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trendmicro:antivirus_toolkit:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5225790C-66F3-438C-82A9-0567EA2D3EAE",
              "versionEndExcluding": "1.62.1240"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF019D2D-C426-4D2D-A254-442CE777B41E"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:apex_one:saas:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BD39638-1D52-4FA8-BBA0-305795D7D2E0"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A741097B-4B1F-4541-8E81-ABAAB16F4CCF"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4CC7B6BD-BAF1-4E0D-9BFB-6A9BE7D3AC40"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81D6DD3F-6DA9-4D25-A0AB-8A2670A6FE91"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security:12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BDD405A-E3EA-48F8-AC3D-E45A666920C5"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64600B42-4884-41F2-A683-AE1EDB79372E"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:officescan_business_security:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B20A7619-A7A7-4048-BF27-5B2613DCF914"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:officescan_business_security:9.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14329F60-1C5D-4A4C-BBCA-BD42FFB4FB73"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:officescan_business_security:10.0:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "762313F8-2BA6-4ED7-A977-56C962D5B27F"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:officescan_business_security_service:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E3FC1CA-FFB4-4838-9BCE-BB5CAC28505F"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:officescan_cloud:15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D4FDFB7-9F82-47F2-B265-916BFCE0A0EA"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:officescan_cloud:16.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C23A004A-B597-402D-BFA8-9EB11580B13F"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:online_scan:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "388766C0-6983-453A-A1C2-8266127337C3"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:portable_security:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D33BDD31-422F-4DB0-B2DC-789611260C35"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:portable_security:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "079E3712-9365-44F8-804B-2ADBD89C1D5D"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:rootkit_buster:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AA0F265-BD68-41F7-99DD-8832EE7E295B"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:safe_lock:-:*:*:*:txone:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8549A2AA-5BDE-4B27-9861-9426769FAB0E"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:safe_lock:2.0:sp1:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B28CE37-C436-4440-B43F-905482D91AD9"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:emc:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BD9FEA3-46A4-4CEF-97B5-27BC2120B082"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:netware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "82D38D59-9208-4101-89D8-367E53DA29D5"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7293D7E6-196E-4C9F-B107-77FB2E770A1E"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:serverprotect:6.0:*:*:*:*:storage:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46FD65C7-6DED-47CA-988D-089E95D2F7B5"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@trendmicro.com"
}