csirt@kutim:~/threat-intel/cve/CVE-2025-30641

Katalog CVE

CVSS 7.8 · High EPSS 0,19%

Kerentanan Improper Link Resolution Before File Access ('Link Following') pada trendmicro deep security agent. Skor CVSS 3.1 7.8 (High) menurut trendmicro.com.

Deskripsi (NVD)

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Rincian

Terbit di NVD
17 Juni 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.8 (High), sumber trendmicro.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-59: Improper Link Resolution Before File Access ('Link Following')
EPSS (30 hari)
0,19% peluang dieksploitasi; lebih tinggi dari 7,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
trendmicro deep security agent Semua versi sebelum 20.0.1
trendmicro deep security agent Versi 20.0.1
trendmicro deep security agent Versi 20.0.1 update12510
trendmicro deep security agent Versi 20.0.1 update14610
trendmicro deep security agent Versi 20.0.1 update17380
trendmicro deep security agent Versi 20.0.1 update19250
trendmicro deep security agent Versi 20.0.1 update21510
trendmicro deep security agent Versi 20.0.1 update23340
trendmicro deep security agent Versi 20.0.1 update3180
trendmicro deep security agent Versi 20.0.1 update4540
trendmicro deep security agent Versi 20.0.1 update690
trendmicro deep security agent Versi 20.0.1 update7380
trendmicro deep security agent Versi 20.0.1 update9400

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.