NetSight
IP …
medium6.7

CVE-2020-8607

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an …

Impact

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.

Affected products

VendorProductAffected versions
TrendmicroAntivirus Toolkit
before 1.62.1240
TrendmicroApex One
Versions 2019, saas
TrendmicroDeep Security
Versions 9.6, 10.0, 11.0, 12.0
TrendmicroOfficescan
Version xg
TrendmicroOfficescan Business Security
Versions 9.0, 9.5, 10.0
TrendmicroOfficescan Business Security Service
All versions
TrendmicroOfficescan Cloud
Versions 15, 16.0
TrendmicroOnline Scan
Version 8.0
TrendmicroPortable Security
Versions 2.0, 3.0
TrendmicroRootkit Buster
Version 2.2
TrendmicroSafe Lock
All versions
Version 2.0
TrendmicroServerprotect
Versions 5.8, 6.0

Weakness classification

CWE-20

References