CVE-2020-8602: High severity trend micro deep security manager vulnerability

Published Aug 27, 2020

Updated

A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full control privileges to bypass file integrity checks, leading to remote code execution.

Affected Software

5 affected components

trendmicro Deep Security Manager=10.0

trendmicro Deep Security Manager=11.0

trendmicro Deep Security Manager=12.0

trendmicro Vulnerability Protection=2.0-sp2

Microsoft Windows

Remediation

Patch Available

https://success.trendmicro.com/solution/000252039

Event History

Aug 27, 2020

CVE Published

via MITRE·08:35 PM

Data Sourced

via MITRE·08:35 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-8602?

CVE-2020-8602 has a high severity rating due to its potential for remote code execution.

How do I fix CVE-2020-8602?

To fix CVE-2020-8602, update to the latest versions of Trend Micro Deep Security or Vulnerability Protection as recommended by Trend Micro.

Who is affected by CVE-2020-8602?

CVE-2020-8602 affects users of Trend Micro Deep Security versions 10.0 to 12.0 and Trend Micro Vulnerability Protection version 2.0 SP2.

What type of attack does CVE-2020-8602 allow?

CVE-2020-8602 allows authenticated attackers with full control privileges to bypass file integrity checks.

What can attackers achieve through CVE-2020-8602?

Attackers can potentially achieve remote code execution through the exploitation of CVE-2020-8602.