VulnerabilityModified
CVE-2020-28575
A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations.
MEDIUM 6.7EPSS 0.67%
Does this matter?
Lower severity and a low EPSS score (0.67%). Track it; it rarely justifies an emergency change on its own.
Description
A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this vulnerability.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.67% probability · 50th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-787
- Affected
- trendmicro/serverprotect
- Source
- security@trendmicro.com
References
- https://success.trendmicro.com/solution/000281950Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-1378/Third Party Advisory, VDB Entry
- https://success.trendmicro.com/solution/000281950Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-20-1378/Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.