CVE-2020-25775: Trend Micro Maximum Security Race Condition Arbitrary File Deletion Vulnerability
First published: Mon Sep 28 2020(Updated: )
The Trend Micro Security 2020 (v16) consumer family of products is vulnerable to a security race condition arbitrary file deletion vulnerability that could allow an unprivileged user to manipulate the product's secure erase feature to delete files with a higher set of privileges.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro Maximum Security 2022 | ||
| Trend Micro Antivirus+ 2020 | <=16.0 | |
| Trend Micro Internet Security | <=16.0 | |
| Trend Micro Maximum Security | <=16.0 | |
| Trend Micro Premium Security 2020 | <=16.0 | |
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-25775?
CVE-2020-25775 has a medium severity rating due to its potential for arbitrary file deletion.
How do I fix CVE-2020-25775?
To fix CVE-2020-25775, users should update their Trend Micro Security products to the latest available version that addresses this vulnerability.
What products are affected by CVE-2020-25775?
CVE-2020-25775 affects Trend Micro Maximum Security 2020, Internet Security 2020, and Antivirus+ 2020.
Who can exploit CVE-2020-25775?
An unprivileged user can exploit CVE-2020-25775 to manipulate the secure erase feature of the vulnerable Trend Micro products.
What type of vulnerability is CVE-2020-25775?
CVE-2020-25775 is a security race condition vulnerability that allows for arbitrary file deletion.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/title
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/trending
- agent/source
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-1227
- alias/ZDI-CAN-10819
- alias/CVE-2020-25775
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- vendor/trend micro
- canonical/trend micro maximum security 2022
- vendor/trendmicro
- canonical/trend micro antivirus+ 2020
- version/trend micro antivirus+ 2020/16.0
- canonical/trend micro internet security
- version/trend micro internet security/16.0
- canonical/trend micro maximum security
- version/trend micro maximum security/16.0
- canonical/trend micro premium security 2020
- version/trend micro premium security 2020/16.0
- vendor/microsoft
- canonical/microsoft windows