csirt@kutim:~/threat-intel/cve/CVE-2019-14688

Katalog CVE

CVSS 7.0 · High EPSS 1,9%

Kerentanan Uncontrolled Search Path Element pada trendmicro control manager, trendmicro endpoint sensor +6 lainnya. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.

Rincian

Terbit di NVD
20 Februari 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-427: Uncontrolled Search Path Element
EPSS (30 hari)
1,9% peluang dieksploitasi; lebih tinggi dari 78,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
trendmicro control manager Versi 7.0
trendmicro endpoint sensor Versi 1.6
trendmicro im security Versi 1.6.5
trendmicro mobile security Versi 9.8
trendmicro officescan Versi xg
trendmicro scanmail Versi 14.0
trendmicro security Versi 2019
trendmicro serverprotect Versi 5.8
trendmicro serverprotect Versi 6.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.