CVE-2024-55955

CWE-427CWE-732 — Incorrect Permission Assignment3 documents3 sources
Severity
7.3HIGH
EPSS
0.0%
top 91.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trend Micro, Inc. Trend Micro Deep SecurityTrendmicro Deep Security Agent
Timeline
PublishedDec 31

Description

An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents between versions 20.0.1-9400 and 20.0.1-23340 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5trend_micro,_inc./trend_micro_deep_security20 — 20.0.1-23340

🔴Vulnerability Details

2
GHSA
GHSA-q3w2-j3fw-vmvp: An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20↗2024-12-31
▶
CVEList
CVE-2024-55955: An incorrect permissions assignment vulnerability in Trend Micro Deep Security 20↗2024-12-31
▶
CVE-2024-55955 (HIGH CVSS 7.3) | An incorrect permissions assignment | cvebase.io