CVE-2022-40710 : A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could

A link following vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Published 2022-09-28 21:15:15

Updated 2024-02-27 20:40:07

Source Trend Micro, Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-40710

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 13 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-40710

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-40710

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-40710

Products affected by CVE-2022-40710

Trendmicro » Deep Security Agent » Version: 20.0 Update Update2921 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update182 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update182:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update1876 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update223 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update223:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update3445 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update213 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update213:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update183 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update183:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update190 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update190:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update4726 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update1559 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update3288 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update167 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update167:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update3771 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3771:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update173 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update173:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update224 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update224:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update4185 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update180 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update180:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update2204 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update2009 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update2419 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2419:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update4959 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update3964 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update5137 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update1337 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update2593 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update208 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update208:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update877 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update158 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update158:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update198 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update198:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update3530 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3530:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update4416 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update2740 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update3165 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update1822 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Update Update1681 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Trendmicro » Deep Security Agent » Version: 20.0 Long Term Support Edition
cpe:2.3:a:trendmicro:deep_security_agent:20.0:-:*:*:long_term_support:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

Vulnerability Details : CVE-2022-40710

Exploit prediction scoring system (EPSS) score for CVE-2022-40710

CVSS scores for CVE-2022-40710

CWE ids for CVE-2022-40710

References for CVE-2022-40710

Products affected by CVE-2022-40710