CVE-2022-30703: Trend Micro Internet Security Exposed Dangerous Method Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NCIE Scanner module. The module exposes a dangerous function to unprivileged users. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the kernel.
Other sources
Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an exposed dangerous method vulnerability that could allow an attacker to obtain access to leaked kernel addresses and disclose sensitive information. This vulnerability could also potentially be chained for privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-30703?
CVE-2022-30703 is a vulnerability that allows local attackers to disclose sensitive information on affected installations of Trend Micro Internet Security.
How does CVE-2022-30703 vulnerability occur?
CVE-2022-30703 vulnerability occurs due to a flaw within Trend Micro Internet Security.
What is the severity level of CVE-2022-30703?
The severity level of CVE-2022-30703 is high.
How can CVE-2022-30703 be exploited?
To exploit CVE-2022-30703, an attacker must first obtain the ability to execute low-privileged code on the target system.
How can I fix CVE-2022-30703?
To fix CVE-2022-30703, it is recommended to update to the latest version of Trend Micro Internet Security provided by the vendor.