CVE-2018-10514: Trend Micro Maximum Security ID_AMSP_MASTER Missing Impersonation Privilege Escalation Vulnerability
A Missing Impersonation Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit the vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of request ID 0x2ff0000b in request IDAMSPMASTER by the coreServiceShell service. The service does not properly impersonate the client before executing sensitive operations. An attacker can leverage this vulnerability to escalate privileges to SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10514?
CVE-2018-10514 is a vulnerability that allows local attackers to escalate privileges on vulnerable installations of Trend Micro Maximum Security.
How does CVE-2018-10514 affect Trend Micro Maximum Security?
CVE-2018-10514 allows local attackers to escalate privileges on installations of Trend Micro Maximum Security.
How can I exploit CVE-2018-10514?
To exploit CVE-2018-10514, an attacker must first obtain the ability to execute low-privileged code on the target system.
What is the severity of CVE-2018-10514?
CVE-2018-10514 has a severity rating of 7.8 (high).
How can I fix CVE-2018-10514?
To fix CVE-2018-10514, install the relevant security updates provided by Trend Micro.