CVE-2022-23120: Code Injection
Published Jan 20, 2022
·Updated
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.
Affected Software
84 affected components
trendmicro Deep Security Agent>=20.0<20.0.0-3445
trendmicro Deep Security Agent=10.0
trendmicro Deep Security Agent=10.0-update1
trendmicro Deep Security Agent=10.0-update10
trendmicro Deep Security Agent=10.0-update11
trendmicro Deep Security Agent=10.0-update12
trendmicro Deep Security Agent=10.0-update13
trendmicro Deep Security Agent=10.0-update14
trendmicro Deep Security Agent=10.0-update15
trendmicro Deep Security Agent=10.0-update16
trendmicro Deep Security Agent=10.0-update17
trendmicro Deep Security Agent=10.0-update18
trendmicro Deep Security Agent=10.0-update19
trendmicro Deep Security Agent=10.0-update2
trendmicro Deep Security Agent=10.0-update20
trendmicro Deep Security Agent=10.0-update21
trendmicro Deep Security Agent=10.0-update22
trendmicro Deep Security Agent=10.0-update23
trendmicro Deep Security Agent=10.0-update24
trendmicro Deep Security Agent=10.0-update25
trendmicro Deep Security Agent=10.0-update26
trendmicro Deep Security Agent=10.0-update27
trendmicro Deep Security Agent=10.0-update28
trendmicro Deep Security Agent=10.0-update29
trendmicro Deep Security Agent=10.0-update3
trendmicro Deep Security Agent=10.0-update30
trendmicro Deep Security Agent=10.0-update31
trendmicro Deep Security Agent=10.0-update4
trendmicro Deep Security Agent=10.0-update5
trendmicro Deep Security Agent=10.0-update6
trendmicro Deep Security Agent=10.0-update7
trendmicro Deep Security Agent=10.0-update8
trendmicro Deep Security Agent=10.0-update9
trendmicro Deep Security Agent=11.0
trendmicro Deep Security Agent=11.0-update1
trendmicro Deep Security Agent=11.0-update10
trendmicro Deep Security Agent=11.0-update11
trendmicro Deep Security Agent=11.0-update12
trendmicro Deep Security Agent=11.0-update13
trendmicro Deep Security Agent=11.0-update14
trendmicro Deep Security Agent=11.0-update15
trendmicro Deep Security Agent=11.0-update16
trendmicro Deep Security Agent=11.0-update17
trendmicro Deep Security Agent=11.0-update18
trendmicro Deep Security Agent=11.0-update19
trendmicro Deep Security Agent=11.0-update2
trendmicro Deep Security Agent=11.0-update20
trendmicro Deep Security Agent=11.0-update21
trendmicro Deep Security Agent=11.0-update22
trendmicro Deep Security Agent=11.0-update23
trendmicro Deep Security Agent=11.0-update24
trendmicro Deep Security Agent=11.0-update25
trendmicro Deep Security Agent=11.0-update26
trendmicro Deep Security Agent=11.0-update27
trendmicro Deep Security Agent=11.0-update3
trendmicro Deep Security Agent=11.0-update4
trendmicro Deep Security Agent=11.0-update5
trendmicro Deep Security Agent=11.0-update6
trendmicro Deep Security Agent=11.0-update7
trendmicro Deep Security Agent=11.0-update8
trendmicro Deep Security Agent=11.0-update9
trendmicro Deep Security Agent=12.0
trendmicro Deep Security Agent=12.0-update1
trendmicro Deep Security Agent=12.0-update10
trendmicro Deep Security Agent=12.0-update11
trendmicro Deep Security Agent=12.0-update12
trendmicro Deep Security Agent=12.0-update13
trendmicro Deep Security Agent=12.0-update14
trendmicro Deep Security Agent=12.0-update15
trendmicro Deep Security Agent=12.0-update16
trendmicro Deep Security Agent=12.0-update17
trendmicro Deep Security Agent=12.0-update18
trendmicro Deep Security Agent=12.0-update19
trendmicro Deep Security Agent=12.0-update2
trendmicro Deep Security Agent=12.0-update20
trendmicro Deep Security Agent=12.0-update21
trendmicro Deep Security Agent=12.0-update3
trendmicro Deep Security Agent=12.0-update4
trendmicro Deep Security Agent=12.0-update5
trendmicro Deep Security Agent=12.0-update6
trendmicro Deep Security Agent=12.0-update7
trendmicro Deep Security Agent=12.0-update8
trendmicro Deep Security Agent=12.0-update9
Linux Linux kernel
Remediation
Patch Available
Event History
Jan 20, 2022
CVE Published
via MITRE·06:11 PM
Data Sourced
via MITRE·06:11 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-23120?
CVE-2022-23120 has been classified as a critical vulnerability that allows privilege escalation and arbitrary code execution.
2
How do I fix CVE-2022-23120?
To remediate CVE-2022-23120, update Trend Micro Deep Security to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2022-23120?
CVE-2022-23120 affects versions 20 and below of the Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux.
4
What kind of attack is possible with CVE-2022-23120?
An attacker exploiting CVE-2022-23120 can escalate their privileges and execute arbitrary code as root.
5
What is Trend Micro Deep Security?
Trend Micro Deep Security is a cybersecurity solution that protects servers and virtual environments from threats.