CVE-2022-30523
Last modified
CVE-2022-30523 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the affected machine.. EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow a low privileged local attacker to delete the contents of an arbitrary folder as SYSTEM which can then be used for privilege escalation on the affected machine.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trendmicro | Password Manager | < 5.0.0.1270 |
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-09071Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-22-759/Third Party Advisory, VDB Entry
- https://helpcenter.trendmicro.com/en-us/article/tmka-09071Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-22-759/Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-30523?
How severe is CVE-2022-30523?
How do I fix CVE-2022-30523?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-30517Mogu blog 5.2 is vulnerable to Cross Site Scripting (XSS).6.1
- CVE-2022-30518ChatBot Application with a Suggestion Feature 1.0 was discov…9.8
- CVE-2022-30519XSS in signing form in Reprise Software RLM License Administ…6.1
- CVE-2022-3052Heap buffer overflow in Window Manager in Google Chrome on C…8.8
- CVE-2022-30521The LAN-side Web-Configuration Interface has Stack-based Buf…9.8
- CVE-2022-30522If Apache HTTP Server 2.4.53 is configured to do transformat…7.5
- CVE-2022-30524There is an invalid memory access in the TextLine class in T…7.8
- CVE-2022-30525A OS command injection vulnerability in the CGI program of Z…9.8
- CVE-2022-30526A privilege escalation vulnerability was identified in the C…7.8
- CVE-2022-30527A vulnerability has been identified in SINEC NMS (All versio…7.8
- CVE-2022-30528SQL Injection vulnerability in asith-eranga ISIC tour bookin…9.8
- CVE-2022-30529File upload vulnerability in asith-eranga ISIC tour booking …7.2
Are you affected by CVE-2022-30523?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST