csirt@kutim:~/threat-intel/cve/CVE-2024-36358

Katalog CVE

CVSS 7.8 · High EPSS 0,53%

Kerentanan Insufficient Use of Symbolic Constants pada trendmicro deep security agent. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Rincian

Terbit di NVD
10 Juni 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-1106: Insufficient Use of Symbolic Constants
EPSS (30 hari)
0,53% peluang dieksploitasi; lebih tinggi dari 43,3% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
trendmicro deep security agent Versi 20.0 update1194
trendmicro deep security agent Versi 20.0 update1304
trendmicro deep security agent Versi 20.0 update1337
trendmicro deep security agent Versi 20.0 update1559
trendmicro deep security agent Versi 20.0 update1681
trendmicro deep security agent Versi 20.0 update1822
trendmicro deep security agent Versi 20.0 update1876
trendmicro deep security agent Versi 20.0 update2009
trendmicro deep security agent Versi 20.0 update2204
trendmicro deep security agent Versi 20.0 update2395
trendmicro deep security agent Versi 20.0 update2593
trendmicro deep security agent Versi 20.0 update2971
trendmicro deep security agent Versi 20.0 update3165
trendmicro deep security agent Versi 20.0 update3288
trendmicro deep security agent Versi 20.0 update3445
trendmicro deep security agent Versi 20.0 update3770
trendmicro deep security agent Versi 20.0 update4185
trendmicro deep security agent Versi 20.0 update4416
trendmicro deep security agent Versi 20.0 update4726
trendmicro deep security agent Versi 20.0 update4959
trendmicro deep security agent Versi 20.0 update5137
trendmicro deep security agent Versi 20.0 update5394
trendmicro deep security agent Versi 20.0 update5512
trendmicro deep security agent Versi 20.0 update5761
trendmicro deep security agent Versi 20.0 update5953
trendmicro deep security agent Versi 20.0 update6313
trendmicro deep security agent Versi 20.0 update6658
trendmicro deep security agent Versi 20.0 update6912
trendmicro deep security agent Versi 20.0 update7119
trendmicro deep security agent Versi 20.0 update7303
trendmicro deep security agent Versi 20.0 update7476
trendmicro deep security agent Versi 20.0 update7719
trendmicro deep security agent Versi 20.0 update7943
trendmicro deep security agent Versi 20.0 update8137
trendmicro deep security agent Versi 20.0 update8268
trendmicro deep security agent Versi 20.0 update8438
trendmicro deep security agent Versi 20.0 update8453
trendmicro deep security agent Versi 20.0 update877
trendmicro deep security agent Versi 20.0.1 update690
trendmicro deep security agent Versi 20.0 update2419
trendmicro deep security agent Versi 20.0 update2740
trendmicro deep security agent Versi 20.0 update2921
trendmicro deep security agent Versi 20.0 update3530
trendmicro deep security agent Versi 20.0 update3771
trendmicro deep security agent Versi 20.0 update3964
trendmicro deep security agent Versi 20.0 update5810
trendmicro deep security agent Versi 20.0 update5995
trendmicro deep security agent Versi 20.0 update6690
trendmicro deep security agent Versi 20.0 update6860
trendmicro deep security agent Versi 20.0.1 update700

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.