ID
VAR-202406-0101
CVE
CVE-2024-32849
TITLE
Trend Micro Maximum Security coreServiceShell Link Following Local Privilege Escalation Vulnerability
Trust: 0.7
DESCRIPTION
Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files including its own. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.The specific flaw exists within the coreServiceShell. By creating a symbolic link, an attacker can abuse the service to delete a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM
Trust: 1.53
AFFECTED PRODUCTS
| vendor: | trend micro | model: | maximum security | scope: | - | version: | - | Trust: 0.7 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-269 | Trust: 1.0 |
PATCH
| title: | Trend Micro has issued an update to correct this vulnerability. | url: | https://helpcenter.trendmicro.com/en-us/article/tmka-19175 | Trust: 0.7 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-32849 | Trust: 1.7 |
| db: | ZDI | id: | ZDI-24-576 | Trust: 1.7 |
| db: | ZDI_CAN | id: | ZDI-CAN-22269 | Trust: 0.7 |
REFERENCES
| url: | https://helpcenter.trendmicro.com/en-us/article/tmka-19175 | Trust: 1.7 |
| url: | https://www.zerodayinitiative.com/advisories/zdi-24-576/ | Trust: 1.0 |
CREDITS
Nicholas Zubrisky and Michael DePlante (@izobashi) of Trend Micro's Zero Day Initiative
Trust: 0.7
SOURCES
| db: | ZDI | id: | ZDI-24-576 |
| db: | NVD | id: | CVE-2024-32849 |
LAST UPDATE DATE
2024-08-14T15:41:12.700000+00:00
SOURCES UPDATE DATE
| db: | ZDI | id: | ZDI-24-576 | date: | 2024-07-01T00:00:00 |
| db: | NVD | id: | CVE-2024-32849 | date: | 2024-07-03T01:57:09.160 |
SOURCES RELEASE DATE
| db: | ZDI | id: | ZDI-24-576 | date: | 2024-06-06T00:00:00 |
| db: | NVD | id: | CVE-2024-32849 | date: | 2024-06-10T22:15:09.453 |