CVE-2022-40980: Critical severity trendmicro Mobile Security vulnerability

Published Sep 19, 2022

Updated

A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.

Affected Software

1 affected component

trendmicro Mobile Security=9.8-sp5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Trend Micro Mobile Security for Enterprise to a version that resolves this vulnerability.
Fixed in 9.8 SP5 Critical Patch 2

Event History

Sep 19, 2022

CVE Published

via MITRE·06:01 PM

Data Sourced

via MITRE·06:01 PM

DescriptionWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability ID for this potential file deletion vulnerability?

The vulnerability ID for this potential file deletion vulnerability is CVE-2022-40980.

What is the severity level of CVE-2022-40980?

The severity level of CVE-2022-40980 is critical with a severity value of 9.1.

Which software version is affected by CVE-2022-40980?

CVE-2022-40980 affects Trend Micro Mobile Security for Enterprise 9.8 SP5.

How can an attacker exploit CVE-2022-40980?

An attacker with access to the Management Server can exploit CVE-2022-40980 by deleting files.

How was CVE-2022-40980 resolved?

CVE-2022-40980 was resolved in Trend Micro Mobile Security for Enterprise 9.8 SP5 Critical Patch 2.