Trend Micro Anti Threat Toolkit (Attk) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Trend Micro Anti Threat Toolkit (Attk), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2020-8607trend microtrend micro anti-threat toolkit (attk)+22
EPSS score
0.55%
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.7.8CVE-2019-20358trend microtrend micro anti-threat toolkit (attk)+1
EPSS score
4.62%
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed. Another attack vector similar to CVE-2019-9491 was idenitfied and resolved in version 1.62.0.1228 of the tool.7.8CVE-2019-9491trend microtrend micro anti-threat toolkit (attk)+1
EPSS score
12.94%
Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.