CVE-2022-23120

trendmicro deep security agent

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2022-23120

Katalog CVE

CVSS 7.8 · High EPSS 6,4%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada trendmicro deep security agent. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.

Rincian

Terbit di NVD
20 Januari 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-94: Improper Control of Generation of Code ('Code Injection')
EPSS (30 hari)
6,4% peluang dieksploitasi; lebih tinggi dari 93,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
trendmicro deep security agent Versi 20.0 hingga sebelum 20.0.0-3445
trendmicro deep security agent Versi 10.0
trendmicro deep security agent Versi 10.0 update1
trendmicro deep security agent Versi 10.0 update10
trendmicro deep security agent Versi 10.0 update11
trendmicro deep security agent Versi 10.0 update12
trendmicro deep security agent Versi 10.0 update13
trendmicro deep security agent Versi 10.0 update14
trendmicro deep security agent Versi 10.0 update15
trendmicro deep security agent Versi 10.0 update16
trendmicro deep security agent Versi 10.0 update17
trendmicro deep security agent Versi 10.0 update18
trendmicro deep security agent Versi 10.0 update19
trendmicro deep security agent Versi 10.0 update2
trendmicro deep security agent Versi 10.0 update20
trendmicro deep security agent Versi 10.0 update21
trendmicro deep security agent Versi 10.0 update22
trendmicro deep security agent Versi 10.0 update23
trendmicro deep security agent Versi 10.0 update24
trendmicro deep security agent Versi 10.0 update25
trendmicro deep security agent Versi 10.0 update26
trendmicro deep security agent Versi 10.0 update27
trendmicro deep security agent Versi 10.0 update28
trendmicro deep security agent Versi 10.0 update29
trendmicro deep security agent Versi 10.0 update3
trendmicro deep security agent Versi 10.0 update30
trendmicro deep security agent Versi 10.0 update31
trendmicro deep security agent Versi 10.0 update4
trendmicro deep security agent Versi 10.0 update5
trendmicro deep security agent Versi 10.0 update6
trendmicro deep security agent Versi 10.0 update7
trendmicro deep security agent Versi 10.0 update8
trendmicro deep security agent Versi 10.0 update9
trendmicro deep security agent Versi 11.0
trendmicro deep security agent Versi 11.0 update1
trendmicro deep security agent Versi 11.0 update10
trendmicro deep security agent Versi 11.0 update11
trendmicro deep security agent Versi 11.0 update12
trendmicro deep security agent Versi 11.0 update13
trendmicro deep security agent Versi 11.0 update14
trendmicro deep security agent Versi 11.0 update15
trendmicro deep security agent Versi 11.0 update16
trendmicro deep security agent Versi 11.0 update17
trendmicro deep security agent Versi 11.0 update18
trendmicro deep security agent Versi 11.0 update19
trendmicro deep security agent Versi 11.0 update2
trendmicro deep security agent Versi 11.0 update20
trendmicro deep security agent Versi 11.0 update21
trendmicro deep security agent Versi 11.0 update22
trendmicro deep security agent Versi 11.0 update23
trendmicro deep security agent Versi 11.0 update24
trendmicro deep security agent Versi 11.0 update25
trendmicro deep security agent Versi 11.0 update26
trendmicro deep security agent Versi 11.0 update27
trendmicro deep security agent Versi 11.0 update3
trendmicro deep security agent Versi 11.0 update4
trendmicro deep security agent Versi 11.0 update5
trendmicro deep security agent Versi 11.0 update6
trendmicro deep security agent Versi 11.0 update7
trendmicro deep security agent Versi 11.0 update8

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 83 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.