CVE-2022-40980
Last modified
CVE-2022-40980 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.. EPSS estimates a 1.07% chance of exploitation in the next 30 days.
Description
A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Trendmicro | Mobile Security | 9.8 | Sp5 |
References
- https://files.trendmicro.com/documentation/readme/tmms_sp5_cp2/tmms-ee_9.8_sp5_patch2_readme_server.txtRelease Notes, Vendor Advisory
- https://files.trendmicro.com/documentation/readme/tmms_sp5_cp2/tmms-ee_9.8_sp5_patch2_readme_server.txtRelease Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-40980?
How severe is CVE-2022-40980?
How do I fix CVE-2022-40980?
Are you affected by CVE-2022-40980?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST