« Volver al listado

CVE-2025-30642

Estado: AnalizadaMedia (5.5)—

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Trendmicro — Deep Security Agent

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-30642",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-30642",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-18T14:19:47.867850Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@trendmicro.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@trendmicro.com",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1-25770:long_term_support:*:*:*:*:*:*"
          ],
          "vendor": "Trend Micro, Inc.",
          "product": "Trend Micro Deep Security",
          "versions": [
            {
              "status": "affected",
              "version": "20",
              "lessThan": "20.0.1-25770",
              "versionType": "semver"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-06-17T21:15:37.840",
  "references": [
    {
      "url": "https://success.trendmicro.com/en-US/solution/KA-0019344",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-241/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "security@trendmicro.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@trendmicro.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service (DoS) situation on affected installations.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad que sigue un enlace en los agentes de Trend Micro Deep Security 20.0 podría permitir a un atacante local crear una situación de denegación de servicio (DoS) en las instalaciones afectadas. Nota: Para explotar esta vulnerabilidad, un atacante primero debe poder ejecutar código con privilegios bajos en el sistema objetivo."
    }
  ],
  "lastModified": "2026-06-17T09:09:05.173",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:*:*:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C37012B3-DEB8-43B7-8CA5-61475F4E64AB",
              "versionEndExcluding": "20.0.1"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:-:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2DDCEDE-AAC9-4775-8496-EB586064EFC0"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update12510:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C05839B1-B2FE-4AAA-9E62-DC913FA703ED"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update14610:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D807E63A-41D5-4D70-8754-D7BA24A3872F"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update17380:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4C9B954-64D3-4C1C-8CAF-B12A3D25C842"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update19250:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "62C967EC-7A1D-4AD1-B09F-B99B3A7D11CC"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update21510:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B17AA4C-739B-41B3-BD59-447291FE6C19"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update23340:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E982255D-BD66-46EE-9B28-0C5720FA27BE"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update3180:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E28C9F7F-F7F4-4199-933B-4AE42F773F5F"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update4540:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24BFA08E-F1AA-45A0-A8E4-D8D073BADDE4"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF6B83AD-8517-4952-890B-4CF725407131"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update7380:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05D1A109-AED2-41B2-A1E5-FBE77CE99949"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update9400:*:*:long_term_support:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CE53A47-01E2-4BB5-9411-80FE4C137F77"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@trendmicro.com"
}