CVE-2019-20358 - CVE House
Back to Database
Status published High CVE-2019-20358

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have...

Vulnerability Description

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. Another attack vector similar to CVE-2019-9491 was idenitfied and resolved in version 1.62.0.1228 of the tool.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-20358

Credits & Attribution

No credits recorded in the NVD database.

References

More from Trend Micro

View All →
CVE-2022-41749
An origin validation error vulnerability in Trend Micro Apex One...
High 7.8
CVE-2022-41748
A registry permissions vulnerability in the Trend Micro Apex One...
Medium 6.7
CVE-2022-41747
An improper certification validation vulnerability in Trend Micro Apex One...
High 7.8
CVE-2022-41746
A forced browsing vulnerability in Trend Micro Apex One could...
Critical 9.1
CVE-2022-41745
An Out-of-Bounds access vulnerability in Trend Micro Apex One could...
High 7

Affected Vendor

Trend Micro

View all reports →

Affected Software

Trend Micro Anti-Threat Toolkit (ATTK)
Vulnerable Versions:
Version 1.62.0.1218 and below

Timeline

Official Publish: January 30th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.