What is the CVSS score of CVE-2020-8607?

CVE-2020-8607 has a CVSS 3.1 base score of 6.7 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.7%.

Is there a patch available for CVE-2020-8607?

Yes, a patch is available for CVE-2020-8607. Update the affected software to the latest version immediately.

Trend Micro CVE-2020-8607

MEDIUM

Improper Input Validation (CWE-20)

2020-08-05 security@trendmicro.com

RCE Trend Micro Antivirus Toolkit Apex One Deep Security Officescan Officescan Business Security Officescan Business Security Service Officescan Cloud Online Scan Portable Security Rootkit Buster Safe Lock Serverprotect

6.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.7 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Aug 05, 2020 - 14:15 nvd

MEDIUM 6.7

DescriptionNVD

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability. Affected products include: Trendmicro Antivirus Toolkit, Trendmicro Apex One, Trendmicro Deep Security, Trendmicro Officescan, Trendmicro Officescan Business Security.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.