← Back

CVE-2022-23120

nvd nist
Published: Jan 20, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.

Affected (83)

1 product
Deep Security Agent
Configuration A
83 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Trendmicro
From 20.0 to 20.0.0-3445
Version 10.0
Version 10.0 update10
Version 10.0 update11
Version 10.0 update12
Version 10.0 update13
Version 10.0 update14
Version 10.0 update15
Version 10.0 update16
Version 10.0 update17
Version 10.0 update18
Version 10.0 update19
Version 10.0 update1
Version 10.0 update20
Version 10.0 update21
Version 10.0 update22
Version 10.0 update23
Version 10.0 update24
Version 10.0 update25
Version 10.0 update26
Version 10.0 update27
Version 10.0 update28
Version 10.0 update29
Version 10.0 update2
Version 10.0 update30
Version 10.0 update31
Version 10.0 update3
Version 10.0 update4
Version 10.0 update5
Version 10.0 update6
Version 10.0 update7
Version 10.0 update8
Version 10.0 update9
Version 11.0
Version 11.0 update10
Version 11.0 update11
Version 11.0 update12
Version 11.0 update13
Version 11.0 update14
Version 11.0 update15
Version 11.0 update16
Version 11.0 update17
Version 11.0 update18
Version 11.0 update19
Version 11.0 update1
Version 11.0 update20
Version 11.0 update21
Version 11.0 update22
Version 11.0 update23
Version 11.0 update24
Version 11.0 update25
Version 11.0 update26
Version 11.0 update27
Version 11.0 update2
Version 11.0 update3
Version 11.0 update4
Version 11.0 update5
Version 11.0 update6
Version 11.0 update7
Version 11.0 update8
Version 11.0 update9
Version 12.0
Version 12.0 update10
Version 12.0 update11
Version 12.0 update12
Version 12.0 update13
Version 12.0 update14
Version 12.0 update15
Version 12.0 update16
Version 12.0 update17
Version 12.0 update18
Version 12.0 update19
Version 12.0 update1
Version 12.0 update20
Version 12.0 update21
Version 12.0 update2
Version 12.0 update3
Version 12.0 update4
Version 12.0 update5
Version 12.0 update6
Version 12.0 update7
Version 12.0 update8
Version 12.0 update9
Running on/withPlatform Versions
Linux
Linux Kernel
All versions

References (4)

Source: security@trendmicro.com
MitigationPatchVendor Advisory
Source: security@trendmicro.com
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.