CVE-2018-6218 : A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) co

A DLL Hijacking vulnerability in Trend Micro's User-Mode Hooking Module (UMH) could allow an attacker to run arbitrary code on a vulnerable system.

Published 2018-02-16 22:29:00

Updated 2021-09-13 12:22:39

Source Trend Micro, Inc.

View at NVD, CVE.org

Vulnerability category: File inclusion

Products affected by CVE-2018-6218

Trendmicro » Officescan » Version: 12.0
cpe:2.3:a:trendmicro:officescan:12.0:*:*:*:*:*:*:*
Matching versions
Trendmicro » Officescan » Version: 11.0
cpe:2.3:a:trendmicro:officescan:11.0:*:*:*:*:*:*:*
Matching versions
Trendmicro » Endpoint Sensor » Version: 1.6
cpe:2.3:a:trendmicro:endpoint_sensor:1.6:*:*:*:*:*:*:*
Matching versions
Trendmicro » Security » Version: 12.0
cpe:2.3:a:trendmicro:security:12.0:*:*:*:*:*:*:*
Matching versions
Trendmicro » Worry-free Business Security » Version: 9.5 Advanced Edition
cpe:2.3:a:trendmicro:worry-free_business_security:9.5:*:*:*:advanced:*:*:*
Matching versions
Trendmicro » Worry-free Business Security » Version: 9.5 Standard Edition
cpe:2.3:a:trendmicro:worry-free_business_security:9.5:*:*:*:standard:*:*:*
Matching versions
Trendmicro » Deep Security » Version: 10.0
cpe:2.3:a:trendmicro:deep_security:10.0:*:*:*:*:*:*:*
Matching versions
Trendmicro » Deep Security » Version: 10.1
cpe:2.3:a:trendmicro:deep_security:10.1:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.1	MEDIUM	AV:N/AC:H/Au:N/C:P/I:P/A:P	4.9	6.4	NIST
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.0	HIGH	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H	1.0	5.9	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE-426 Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

Assigned by: nvd@nist.gov (Primary)

http://www.securityfocus.com/bid/103096

Multiple Trend Micro Products CVE-2018-6218 DLL Loading Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry
https://jvn.jp/jp/JVN28865183/

JVN#28865183: トレンドマイクロ株式会社製の複数の製品における DLL 読み込みに関する脆弱性
Third Party Advisory
https://success.trendmicro.com/jp/solution/1119348

Q&A | Trend Micro Business Support
Vendor Advisory
https://success.trendmicro.com/solution/1119326

User-Mode Hooking (UMH) Module DLL Hijacking Vulnerability
Vendor Advisory

Jump to