CVE-2024-55955

trendmicro deep security agent

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-55955

Katalog CVE

CVSS 7.3 · High EPSS 0,14%

Kerentanan Uncontrolled Search Path Element pada trendmicro deep security agent. Skor CVSS 3.1 7.3 (High) menurut NVD.

Deskripsi (NVD)

An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Rincian

Terbit di NVD
31 Desember 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.3 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-427: Uncontrolled Search Path Element
CWE-732: Incorrect Permission Assignment for Critical Resource
EPSS (30 hari)
0,14% peluang dieksploitasi; lebih tinggi dari 2,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
trendmicro deep security agent Versi 20.0.1 update12510
trendmicro deep security agent Versi 20.0.1 update14610
trendmicro deep security agent Versi 20.0.1 update17380
trendmicro deep security agent Versi 20.0.1 update19250
trendmicro deep security agent Versi 20.0.1 update21510
trendmicro deep security agent Versi 20.0.1 update9400

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.