CVE-2018-6218: High severity trendmicro Deep Security vulnerability

Published Feb 16, 2018

Updated

A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.

Affected Software

8 affected components

trendmicro Deep Security=10.0

trendmicro Deep Security=10.1

trendmicro Endpoint Sensor=1.6

trendmicro Officescan=11.0

trendmicro Officescan=12.0

trendmicro Security=12.0

trendmicro Worry-free Business Security=9.5

Event History

Feb 16, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Data Sourced

via NVD·10:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-6218?

CVE-2018-6218 is a DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) that could allow an attacker to run arbitrary code on a vulnerable system.

How does CVE-2018-6218 affect Trend Micro's Deep Security?

CVE-2018-6218 affects Trend Micro's Deep Security version 10.0 and 10.1.

How does CVE-2018-6218 affect Trend Micro's Endpoint Sensor?

CVE-2018-6218 affects Trend Micro's Endpoint Sensor version 1.6.

How does CVE-2018-6218 affect Trend Micro's Officescan?

CVE-2018-6218 affects Trend Micro's Officescan versions 11.0 and 12.0.

How does CVE-2018-6218 affect Trend Micro's Security?

CVE-2018-6218 affects Trend Micro's Security version 12.0.

How does CVE-2018-6218 affect Trend Micro's Worry-free Business Security?

CVE-2018-6218 affects Trend Micro's Worry-free Business Security version 9.5 (both Advanced and Standard editions).

What is the severity of CVE-2018-6218?

CVE-2018-6218 has a severity rating of 7 (High).

How can I fix CVE-2018-6218?

To fix CVE-2018-6218, it is recommended to apply the relevant security patches or updates provided by Trend Micro.

Where can I find more information about CVE-2018-6218?

You can find more information about CVE-2018-6218 on the following references: SecurityFocus (http://www.securityfocus.com/bid/103096), JVN (https://jvn.jp/jp/JVN28865183/), and Trend Micro's solution (https://success.trendmicro.com/jp/solution/1119348).

What is the CWE classification of CVE-2018-6218?

CVE-2018-6218 is classified under CWE-426 (Untrusted Search Path).