CVE-2024-51503: Trend Micro Deep Security Agent Manual Scan Command Injection Remote Code Execution Vulnerability

Published Nov 19, 2024

Updated

A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to remotely inject commands to other machines in the same domain. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability locally and must have domain user privileges to affect other machines.

Other sources

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Deep Security Agent. Authentication is required to exploit this vulnerability. The specific flaw exists within the Trend Micro Deep Security Notifier service. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.

— ZDI

Affected Software

65 affected components

Trend Micro Deep Security

trendmicro Deep Security Agent=20.0

trendmicro Deep Security Agent=20.0-update1337

trendmicro Deep Security Agent=20.0-update1559

trendmicro Deep Security Agent=20.0-update158

trendmicro Deep Security Agent=20.0-update167

trendmicro Deep Security Agent=20.0-update1681

trendmicro Deep Security Agent=20.0-update173

trendmicro Deep Security Agent=20.0-update180

trendmicro Deep Security Agent=20.0-update182

trendmicro Deep Security Agent=20.0-update1822

trendmicro Deep Security Agent=20.0-update183

trendmicro Deep Security Agent=20.0-update1876

trendmicro Deep Security Agent=20.0-update190

trendmicro Deep Security Agent=20.0-update198

trendmicro Deep Security Agent=20.0-update2009

trendmicro Deep Security Agent=20.0-update208

trendmicro Deep Security Agent=20.0-update213

trendmicro Deep Security Agent=20.0-update2204

trendmicro Deep Security Agent=20.0-update223

trendmicro Deep Security Agent=20.0-update224

trendmicro Deep Security Agent=20.0-update2395

trendmicro Deep Security Agent=20.0-update2419

trendmicro Deep Security Agent=20.0-update2593

trendmicro Deep Security Agent=20.0-update2740

trendmicro Deep Security Agent=20.0-update2921

trendmicro Deep Security Agent=20.0-update3165

trendmicro Deep Security Agent=20.0-update3288

trendmicro Deep Security Agent=20.0-update3445

trendmicro Deep Security Agent=20.0-update3530

trendmicro Deep Security Agent=20.0-update3771

trendmicro Deep Security Agent=20.0-update3964

trendmicro Deep Security Agent=20.0-update4185

trendmicro Deep Security Agent=20.0-update4416

trendmicro Deep Security Agent=20.0-update4726

trendmicro Deep Security Agent=20.0-update4959

trendmicro Deep Security Agent=20.0-update5137

trendmicro Deep Security Agent=20.0-update5394

trendmicro Deep Security Agent=20.0-update5512

trendmicro Deep Security Agent=20.0-update5761

trendmicro Deep Security Agent=20.0-update5810

trendmicro Deep Security Agent=20.0-update5995

trendmicro Deep Security Agent=20.0-update6313

trendmicro Deep Security Agent=20.0-update6690

trendmicro Deep Security Agent=20.0-update6860

trendmicro Deep Security Agent=20.0-update690

trendmicro Deep Security Agent=20.0-update7119

trendmicro Deep Security Agent=20.0-update7303

trendmicro Deep Security Agent=20.0-update7476

trendmicro Deep Security Agent=20.0-update7719

trendmicro Deep Security Agent=20.0-update7943

trendmicro Deep Security Agent=20.0-update8137

trendmicro Deep Security Agent=20.0-update8268

trendmicro Deep Security Agent=20.0-update8438

trendmicro Deep Security Agent=20.0-update877

trendmicro Deep Security Agent=20.0.1

trendmicro Deep Security Agent=20.0.1-update12510

trendmicro Deep Security Agent=20.0.1-update14610

trendmicro Deep Security Agent=20.0.1-update17380

trendmicro Deep Security Agent=20.0.1-update19250

trendmicro Deep Security Agent=20.0.1-update3180

trendmicro Deep Security Agent=20.0.1-update4540

trendmicro Deep Security Agent=20.0.1-update690

trendmicro Deep Security Agent=20.0.1-update7380

trendmicro Deep Security Agent=20.0.1-update9400

Event History

Nov 19, 2024

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionSeverity

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 24, 2025

Advisory Published

via ZDI·09:35 AM

Frequently Asked Questions

What is the severity of CVE-2024-51503?

CVE-2024-51503 has been classified as a high severity vulnerability due to its potential to allow privilege escalation and arbitrary code execution.

How do I fix CVE-2024-51503?

To mitigate CVE-2024-51503, it is recommended to update the Trend Micro Deep Security Agent to the latest version where the vulnerability is addressed.

Who is affected by CVE-2024-51503?

CVE-2024-51503 affects users of Trend Micro Deep Security Agent, particularly those with configurations that allow for manual scan command execution.

What types of attacks could exploit CVE-2024-51503?

Exploitation of CVE-2024-51503 could allow attackers with legitimate access to execute arbitrary commands and escalate their privileges on the affected system.

Is CVE-2024-51503 considered a zero-day vulnerability?

CVE-2024-51503 is not classified as a zero-day vulnerability, but it may still pose significant risk to systems until a fix is applied.