RCE in Trendmicro Deep Security Agent
CVE-2024-51503
A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to remotely inject commands to other machines in the same domain. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability locally and must have domain user privileges to affect other machines.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.040 (90.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 90th percentile — 90.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.040 · newest: 0.040 · change: -0.000
Affected products
- Trendmicro Deep Security Agent — versions 20.0, 20.0.1
- Trend Micro, Inc. Micro Deep Security — versions 20
Weakness classification (CWE)
References
- success.trendmicro.com/en-US/solution/KA-0018154 (Vendor Advisory)
- www.zerodayinitiative.com/advisories/ZDI-24-1516/ (Third Party Advisory)
Frequently asked questions
- What is CVE-2024-51503?
- CVE-2024-51503 is a high-severity vulnerability in Trendmicro Deep Security Agent, classified under OS Command Injection. CVSS score: 8.0/10. Published 2024-11-19.
- How severe is CVE-2024-51503?
- High severity. CVSS v3 base score is 8.0 out of 10.