csirt@kutim:~/threat-intel/cve/CVE-2020-8607

Katalog CVE

CVSS 6.7 · Medium EPSS 0,55%

Kerentanan Improper Input Validation pada trendmicro antivirus toolkit, trendmicro apex one +10 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.

Rincian

Terbit di NVD
5 Agustus 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
0,55% peluang dieksploitasi; lebih tinggi dari 44,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
trendmicro antivirus toolkit Semua versi sebelum 1.62.1240
trendmicro apex one Versi 2019
trendmicro apex one Versi saas
trendmicro deep security Versi 9.6
trendmicro deep security Versi 10.0
trendmicro deep security Versi 11.0
trendmicro deep security Versi 12.0
trendmicro officescan Versi xg sp1
trendmicro officescan business security Versi 9.0
trendmicro officescan business security Versi 9.5
trendmicro officescan business security Versi 10.0 sp1
trendmicro officescan business security service Semua versi
trendmicro officescan cloud Versi 15
trendmicro officescan cloud Versi 16.0
trendmicro online scan Versi 8.0
trendmicro portable security Versi 2.0
trendmicro portable security Versi 3.0
trendmicro rootkit buster Versi 2.2
trendmicro safe lock Semua versi
trendmicro safe lock Versi 2.0 sp1
trendmicro serverprotect Versi 5.8
trendmicro serverprotect Versi 6.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.