CVE-2019-20357
First published: Fri Jan 17 2020(Updated: )
A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Antivirus \+ Security 2019 | =15.0 | |
| Trendmicro Antivirus \+ Security 2020 | =16.0 | |
| Trendmicro Internet Security 2019 | =15.0 | |
| Trendmicro Internet Security 2020 | =16.0 | |
| Trendmicro Maximum Security 2019 | =15.0 | |
| Trendmicro Maximum Security 2020 | =16.0 | |
| Trendmicro Premium Security 2019 | =15.0 | |
| Trendmicro Premium Security 2020 | =16.0 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-20357?
CVE-2019-20357 is a Persistent Arbitrary Code Execution vulnerability in Trend Micro Security 2020 (v160) and 2019 (v15) consumer family of products.
How does CVE-2019-20357 work?
CVE-2019-20357 allows an attacker to create a malicious program to escalate privileges and attain persistence on a vulnerable system.
Which software versions are affected by CVE-2019-20357?
Trend Micro Antivirus + Security 2019 (v15.0), Trend Micro Antivirus + Security 2020 (v16.0), Trend Micro Internet Security 2019 (v15.0), Trend Micro Internet Security 2020 (v16.0), Trend Micro Maximum Security 2019 (v15.0), Trend Micro Maximum Security 2020 (v16.0), Trend Micro Premium Security 2019 (v15.0), and Trend Micro Premium Security 2020 (v16.0) are affected by CVE-2019-20357.
What is the severity of CVE-2019-20357?
CVE-2019-20357 has a severity score of 7.8 (high).
How can CVE-2019-20357 be fixed?
To fix CVE-2019-20357, users should update their Trend Micro Security software to the latest available version.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/trendmicro
- canonical/trendmicro antivirus \+ security 2019
- version/trendmicro antivirus \+ security 2019/15.0
- canonical/trendmicro antivirus \+ security 2020
- version/trendmicro antivirus \+ security 2020/16.0
- canonical/trendmicro internet security 2019
- version/trendmicro internet security 2019/15.0
- canonical/trendmicro internet security 2020
- version/trendmicro internet security 2020/16.0
- canonical/trendmicro maximum security 2019
- version/trendmicro maximum security 2019/15.0
- canonical/trendmicro maximum security 2020
- version/trendmicro maximum security 2020/16.0
- canonical/trendmicro premium security 2019
- version/trendmicro premium security 2019/15.0
- canonical/trendmicro premium security 2020
- version/trendmicro premium security 2020/16.0
- vendor/microsoft
- canonical/microsoft windows