CVE-2019-14688

Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run.

CVSS v3 7.0 HIGH
CVSS v2.0 5.1 MEDIUM

7.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.0 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

5.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://success.trendmicro.com/solution/1123562	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:trendmicro:control_manager:7.0:::::::*
	cpe:2.3:a:trendmicro:endpoint_sensor:1.6:::::::*
	cpe:2.3:a:trendmicro:im_security:1.6.5:::::::*
	cpe:2.3:a:trendmicro:mobile_security:9.8::::enterprise:::
	cpe:2.3:a:trendmicro:officescan:xg:::::::*
	cpe:2.3:a:trendmicro:scanmail:14.0:::::microsoft_exchange::
	cpe:2.3:a:trendmicro:security:2019:::::::*
	cpe:2.3:a:trendmicro:serverprotect:5.8:::::emc::
	cpe:2.3:a:trendmicro:serverprotect:5.8:::::netware::
	cpe:2.3:a:trendmicro:serverprotect:5.8:::::windows::
	cpe:2.3:a:trendmicro:serverprotect:6.0:::::storage::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-02-20 23:15

Updated : 2024-02-04 20:39

NVD link : CVE-2019-14688

Mitre link : CVE-2019-14688

CVE.ORG link : CVE-2019-14688

JSON object : View

Products Affected

trendmicro

im_security
scanmail
control_manager
security
officescan
endpoint_sensor
serverprotect
mobile_security

microsoft

windows

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2019-14688", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.0, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.0}]}, "published": "2020-02-20T23:15:20.147", "references": [{"url": "https://success.trendmicro.com/solution/1123562", "tags": ["Vendor Advisory"], "source": "security@trendmicro.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Trend Micro has repackaged installers for several Trend Micro products that were found to utilize a version of an install package that had a DLL hijack vulnerability that could be exploited during a new product installation. The vulnerability was found to ONLY be exploitable during an initial product installation by an authorized user. The attacker must convince the target to download malicious DLL locally which must be present when the installer is run."}, {"lang": "es", "value": "Trend Micro ha reempaquetado instaladores para varios productos de Trend Micro que usaron una versi\u00f3n de un paquete de instalaci\u00f3n que ten\u00eda una vulnerabilidad de secuestro de DLL, que podr\u00eda ser explotada durante la instalaci\u00f3n de un nuevo producto. Se encontr\u00f3 que la vulnerabilidad SOLO es explotable durante la instalaci\u00f3n inicial del producto por parte de un usuario autorizado. El atacante necesita convencer al objetivo de descargar una DLL maliciosa localmente que debe estar presente cuando el instalador se ejecuta."}], "lastModified": "2020-03-04T19:08:15.460", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:control_manager:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F58BCC4-75BE-4B7D-8E29-27CAE3184858"}, {"criteria": "cpe:2.3:a:trendmicro:endpoint_sensor:1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D8769B6-2E3A-41E1-B48F-68B740E6CC47"}, {"criteria": "cpe:2.3:a:trendmicro:im_security:1.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF864E42-A053-4693-BCC3-B2F67A5F85E9"}, {"criteria": "cpe:2.3:a:trendmicro:mobile_security:9.8:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "2F570A01-23A1-4257-8A52-2BA3A14BC47C"}, {"criteria": "cpe:2.3:a:trendmicro:officescan:xg:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "602A0266-B586-447A-A500-1145B77053E8"}, {"criteria": "cpe:2.3:a:trendmicro:scanmail:14.0:*:*:*:*:microsoft_exchange:*:*", "vulnerable": true, "matchCriteriaId": "37BCA3F5-0BC9-4287-A97F-F5E20465EF0E"}, {"criteria": "cpe:2.3:a:trendmicro:security:2019:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8F623C2-ACF4-4122-911E-3BE4A6D41927"}, {"criteria": "cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:emc:*:*", "vulnerable": true, "matchCriteriaId": "0BD9FEA3-46A4-4CEF-97B5-27BC2120B082"}, {"criteria": "cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:netware:*:*", "vulnerable": true, "matchCriteriaId": "82D38D59-9208-4101-89D8-367E53DA29D5"}, {"criteria": "cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "7293D7E6-196E-4C9F-B107-77FB2E770A1E"}, {"criteria": "cpe:2.3:a:trendmicro:serverprotect:6.0:*:*:*:*:storage:*:*", "vulnerable": true, "matchCriteriaId": "46FD65C7-6DED-47CA-988D-089E95D2F7B5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@trendmicro.com"}