CVE-2022-40707
Trend Micro Deep Security Out-Of-Bounds Read Information Disclosure Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit these vulnerabilities. This vulnerability is similar to, but not identical to CVE-2022-40708.
Una vulnerabilidad de lectura fuera de límites en Trend Micro Deep Security 20 y Cloud One - Workload Security Agent para Windows podría permitir a un atacante local divulgar información confidencial en las instalaciones afectadas. Tenga en cuenta: un atacante debe obtener primero la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder explotar estas vulnerabilidades. Esta vulnerabilidad es similar, pero no idéntica, a la CVE-2022-40708
This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Deep Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the User Mode Hooking Monitor Engine. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of SYSTEM.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-09-14 CVE Reserved
- 2022-09-23 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-125: Out-of-bounds Read
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://www.zerodayinitiative.com/advisories/ZDI-22-1297 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://success.trendmicro.com/solution/000291590 | 2024-02-27 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update1337, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update1559, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update158, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update167, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update1681, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update173, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update180, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update182, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update1822, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update183, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update1876, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update190, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update198, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update2009, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update208, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update213, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update2204, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update223, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update224, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update2419, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update2593, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update2740, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update2921, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update3165, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update3288, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update3445, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update3530, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update3771, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update3964, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update4185, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update4416, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update4726, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update4959, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update5137, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|
Trendmicro Search vendor "Trendmicro" | Deep Security Agent Search vendor "Trendmicro" for product "Deep Security Agent" | 20.0 Search vendor "Trendmicro" for product "Deep Security Agent" and version "20.0" | update877, long_term_support |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | - | - |
Safe
|