High severity · published Feb 20, 2020
CVE-2019-14688
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be…
7.0
CVSS
1.9%
EPSS
No
On KEV
Description
Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CM
Control Manager · Trendmicro
7.0 · source: NVD
ES
Endpoint Sensor · Trendmicro
1.6 · source: NVD
IS
IM Security · Trendmicro
1.6.5 · source: NVD
MS
Mobile Security · Trendmicro
9.8 · source: NVD
OF
Officescan · Trendmicro
xg · source: NVD
SC
Scanmail · Trendmicro
14.0 · source: NVD
SE
Security · Trendmicro
2019 · source: NVD
SE
Serverprotect · Trendmicro
5.8; 5.8; 5.8; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-14688
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-14688
Vendor Advisory
https://success.trendmicro.com/solution/1123562
More from Control Manager
10.0
CVE-2018-10511
A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on vulnerable installations
9.8
CVE-2018-10510
A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary code on vulnerable…
9.8
CVE-2018-3601
A password hash usage authentication bypass vulnerability in Trend Micro Control Manager 6.0 could allow a remote attacker to bypass authentication on vulnerable installations
9.8
CVE-2017-11389
Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to drop arbitrary files in a web-facing directory
9.8
CVE-2017-11386
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack of proper user input validation in…