CVE-2022-23120
High
Description
A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.
SeverityHigh
CVSS7.8
Exploit probability—
ProductTrendmicro Deep Security Agent
PublishedJan 20, 2022
First seenJan 20, 2022
How to fix
Update
- trendmicro deep_security_agent20.0.0-3445 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro deep_security_agent | 20.0 ≤ v < 20.0.0-3445, 10.0, 11.0, 12.0 | 20.0.0-3445 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.