CVE-2024-36358

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-36358", "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "state": "PUBLISHED", "assignerShortName": "trendmicro", "dateReserved": "2024-05-23T20:03:45.563Z", "datePublished": "2024-06-10T21:21:48.082Z", "dateUpdated": "2025-03-13T13:55:36.802Z"}, "containers": {"cna": {"affected": [{"vendor": "Trend Micro, Inc.", "product": "Trend Micro Deep Security Agent", "versions": [{"version": "20", "status": "affected", "versionType": "semver", "lessThan": "20.0.1-3180"}]}], "descriptions": [{"lang": "en", "value": "A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."}], "providerMetadata": {"orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "shortName": "trendmicro", "dateUpdated": "2024-06-10T21:21:48.082Z"}, "references": [{"url": "https://success.trendmicro.com/dcx/s/solution/000298151"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 7.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-1106", "lang": "en", "description": "CWE-1106 Insufficient Use of Symbolic Constants"}]}], "affected": [{"vendor": "trendmicro", "product": "deep_security_agent", "cpes": ["cpe:2.3:a:trendmicro:deep_security_agent:20.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "20.0", "status": "affected", "lessThan": "20.0.1-3180", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-11T14:20:25.304200Z", "id": "CVE-2024-36358", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-13T13:55:36.802Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:37:05.280Z"}, "title": "CVE Program Container", "references": [{"url": "https://success.trendmicro.com/dcx/s/solution/000298151", "tags": ["x_transferred"]}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://success.trendmicro.com/dcx/s/solution/000298151", "tags": ["x_transferred"]}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:37:05.280Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-36358", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-11T14:20:25.304200Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:trendmicro:deep_security_agent:20.0:*:*:*:*:*:*:*"], "vendor": "trendmicro", "product": "deep_security_agent", "versions": [{"status": "affected", "version": "20.0", "lessThan": "20.0.1-3180", "versionType": "custom"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1106", "description": "CWE-1106 Insufficient Use of Symbolic Constants"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-11T14:23:34.805Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Trend Micro, Inc.", "product": "Trend Micro Deep Security Agent", "versions": [{"status": "affected", "version": "20", "lessThan": "20.0.1-3180", "versionType": "semver"}]}], "references": [{"url": "https://success.trendmicro.com/dcx/s/solution/000298151"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/"}], "descriptions": [{"lang": "en", "value": "A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."}], "providerMetadata": {"orgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "shortName": "trendmicro", "dateUpdated": "2024-06-10T21:21:48.082Z"}}}, "cveMetadata": {"cveId": "CVE-2024-36358", "state": "PUBLISHED", "dateUpdated": "2025-03-13T13:55:36.802Z", "dateReserved": "2024-05-23T20:03:45.563Z", "assignerOrgId": "7f7bd7df-cffe-4fdb-ab6d-859363b89272", "datePublished": "2024-06-10T21:21:48.082Z", "assignerShortName": "trendmicro"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "Trend Micro Deep Security Agent", "vendor": "Trend Micro, Inc.", "versions": [{"lessThan": "20.0.1-3180", "status": "affected", "version": "20", "versionType": "semver"}]}], "source": "security@trendmicro.com"}, {"affectedData": [{"cpes": ["cpe:2.3:a:trendmicro:deep_security_agent:20.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "product": "deep_security_agent", "vendor": "trendmicro", "versions": [{"lessThan": "20.0.1-3180", "status": "affected", "version": "20.0", "versionType": "custom"}]}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1194:*:*:long_term_support:*:*:*", "matchCriteriaId": "4BE1D2F8-3F0E-4E43-AB20-BB9F280B27EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1304:*:*:long_term_support:*:*:*", "matchCriteriaId": "5C1275B0-D75C-4EBD-8009-F171C0F53D3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*", "matchCriteriaId": "395BE207-3450-4DD8-A5B4-CA005A8A29E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*", "matchCriteriaId": "10692943-0205-42F3-8EBC-64499CC0A3D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*", "matchCriteriaId": "F3DDAC1A-C2E5-4FFB-8A69-80819D39CF5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*", "matchCriteriaId": "6201FA1A-1F94-46DF-A7EE-6F4DE2910131", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*", "matchCriteriaId": "E667A20B-65ED-434F-8A5F-220C87B175EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*", "matchCriteriaId": "2CCE7E62-6CBE-476F-A9E5-52790F90E5BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*", "matchCriteriaId": "920B4F3B-2D78-4B71-8B65-8AEF6AF2C735", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:*", "matchCriteriaId": "C1630066-82A7-45B6-8C9B-5E33544057E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*", "matchCriteriaId": "A61BF475-18D9-4246-91C7-7A1B6A7B44AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2971:*:*:long_term_support:*:*:*", "matchCriteriaId": "302E31AA-AF51-4869-BA2F-832299A5C648", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*", "matchCriteriaId": "9FD0C979-641F-482B-9D05-B3B9A5F6D443", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*", "matchCriteriaId": "F56F3E88-3E65-4C3E-932D-6C8404F5A1BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*", "matchCriteriaId": "2FF0DE00-851E-4185-8C0C-172252E3E7C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3770:*:*:long_term_support:*:*:*", "matchCriteriaId": "3BBF5ADC-D0D4-4BF4-989F-84EAF7573855", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*", "matchCriteriaId": "87821A85-93F2-422B-8876-CF3729D99594", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*", "matchCriteriaId": "0C3E959C-D6D5-4DF0-A26E-95EBDCB8C901", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*", "matchCriteriaId": "F2F3C583-2A09-4448-B384-273B48D2B4E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*", "matchCriteriaId": "445BA171-0190-429A-8D4F-F857CEA5361E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*", "matchCriteriaId": "95889F1E-931E-40E4-99A1-9C1A4A8B0847", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:*", "matchCriteriaId": "3E57A0B9-FD42-4BC2-8E77-473C231E8C26", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:*", "matchCriteriaId": "9A36042B-CE11-400C-A3E9-675FA01DFD79", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:*", "matchCriteriaId": "CA857632-5129-484C-9180-DC3B1A7A99E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5953:*:*:long_term_support:*:*:*", "matchCriteriaId": "7504575F-3A63-4299-B355-682F495BD769", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:*", "matchCriteriaId": "C8B125A6-071C-40BD-BEF8-3349D69B8FBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6658:*:*:long_term_support:*:*:*", "matchCriteriaId": "78CC9093-3CB7-486A-AF1A-189EA52BBF43", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6912:*:*:long_term_support:*:*:*", "matchCriteriaId": "166C9EC4-3A3A-437E-9B71-E8A95808454D", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:*", "matchCriteriaId": "45F6F599-6DFD-4FAC-A3BC-DA04337FBF99", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:*", "matchCriteriaId": "AF3BF95D-BE53-48CF-AC59-7E53B3245E84", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:*", "matchCriteriaId": "CA991E32-E28D-4310-8578-DD92033AEEB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:*", "matchCriteriaId": "41CFF915-1DD8-4C9F-8B43-04BCDA0C5068", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:*", "matchCriteriaId": "C88FD401-BDA4-4080-B56D-D9A980236A9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:*", "matchCriteriaId": "56A61850-1C9F-420B-88CF-D2D92BF1709E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:*", "matchCriteriaId": "6CEB092E-8D28-478E-BEA9-D489EC63D689", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:*", "matchCriteriaId": "1CDA7299-C070-405E-BE53-1B235D6C5CC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8453:*:*:long_term_support:*:*:*", "matchCriteriaId": "7FC6D105-41D4-41BF-BD43-0EA1C69EC47D", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*", "matchCriteriaId": "BF1E7ABB-DEF9-4CBD-B269-3091DC1CF2A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*", "matchCriteriaId": "AF6B83AD-8517-4952-890B-4CF725407131", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*", "matchCriteriaId": "395BE207-3450-4DD8-A5B4-CA005A8A29E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*", "matchCriteriaId": "10692943-0205-42F3-8EBC-64499CC0A3D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*", "matchCriteriaId": "F3DDAC1A-C2E5-4FFB-8A69-80819D39CF5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*", "matchCriteriaId": "6201FA1A-1F94-46DF-A7EE-6F4DE2910131", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*", "matchCriteriaId": "E667A20B-65ED-434F-8A5F-220C87B175EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*", "matchCriteriaId": "2CCE7E62-6CBE-476F-A9E5-52790F90E5BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*", "matchCriteriaId": "920B4F3B-2D78-4B71-8B65-8AEF6AF2C735", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2419:*:*:long_term_support:*:*:*", "matchCriteriaId": "236653DA-EE2C-4923-A5C8-CC32305626FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*", "matchCriteriaId": "A61BF475-18D9-4246-91C7-7A1B6A7B44AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:*", "matchCriteriaId": "DC90635A-4FEB-4F7A-B0BD-D4CCD1183A3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:*", "matchCriteriaId": "6D12CADF-AAA4-4E0B-93EC-81C5C3BDCA47", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*", "matchCriteriaId": "9FD0C979-641F-482B-9D05-B3B9A5F6D443", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*", "matchCriteriaId": "F56F3E88-3E65-4C3E-932D-6C8404F5A1BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*", "matchCriteriaId": "2FF0DE00-851E-4185-8C0C-172252E3E7C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3530:*:*:long_term_support:*:*:*", "matchCriteriaId": "57A322DB-9E37-4508-B904-51F0305D4B9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3771:*:*:long_term_support:*:*:*", "matchCriteriaId": "9CEFF34B-1B17-416F-9068-9CE5DAC0F19D", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:*", "matchCriteriaId": "87A77C12-0F5C-4EA7-96BA-8B14E2795E69", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*", "matchCriteriaId": "87821A85-93F2-422B-8876-CF3729D99594", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*", "matchCriteriaId": "0C3E959C-D6D5-4DF0-A26E-95EBDCB8C901", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*", "matchCriteriaId": "F2F3C583-2A09-4448-B384-273B48D2B4E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*", "matchCriteriaId": "445BA171-0190-429A-8D4F-F857CEA5361E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*", "matchCriteriaId": "95889F1E-931E-40E4-99A1-9C1A4A8B0847", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:*", "matchCriteriaId": "3E57A0B9-FD42-4BC2-8E77-473C231E8C26", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:*", "matchCriteriaId": "9A36042B-CE11-400C-A3E9-675FA01DFD79", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5810:*:*:long_term_support:*:*:*", "matchCriteriaId": "73312B15-FF4F-4576-A6DC-90E7DDC16177", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5995:*:*:long_term_support:*:*:*", "matchCriteriaId": "EC926B09-2153-408D-96D1-339BC6CA3E74", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:*", "matchCriteriaId": "C8B125A6-071C-40BD-BEF8-3349D69B8FBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6690:*:*:long_term_support:*:*:*", "matchCriteriaId": "8798E437-2DF9-4128-95A4-D6E428BB68F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6860:*:*:long_term_support:*:*:*", "matchCriteriaId": "530A146D-8ACA-4EC3-A431-E732CDCBEF5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:*", "matchCriteriaId": "45F6F599-6DFD-4FAC-A3BC-DA04337FBF99", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:*", "matchCriteriaId": "AF3BF95D-BE53-48CF-AC59-7E53B3245E84", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:*", "matchCriteriaId": "CA991E32-E28D-4310-8578-DD92033AEEB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:*", "matchCriteriaId": "41CFF915-1DD8-4C9F-8B43-04BCDA0C5068", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:*", "matchCriteriaId": "C88FD401-BDA4-4080-B56D-D9A980236A9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:*", "matchCriteriaId": "56A61850-1C9F-420B-88CF-D2D92BF1709E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:*", "matchCriteriaId": "6CEB092E-8D28-478E-BEA9-D489EC63D689", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:*", "matchCriteriaId": "1CDA7299-C070-405E-BE53-1B235D6C5CC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*", "matchCriteriaId": "BF1E7ABB-DEF9-4CBD-B269-3091DC1CF2A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*", "matchCriteriaId": "AF6B83AD-8517-4952-890B-4CF725407131", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update700:*:*:long_term_support:*:*:*", "matchCriteriaId": "26E9FE45-48C7-4745-BD8D-F72907AAC469", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1194:*:*:long_term_support:*:*:*", "matchCriteriaId": "4BE1D2F8-3F0E-4E43-AB20-BB9F280B27EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1304:*:*:long_term_support:*:*:*", "matchCriteriaId": "5C1275B0-D75C-4EBD-8009-F171C0F53D3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1337:*:*:long_term_support:*:*:*", "matchCriteriaId": "395BE207-3450-4DD8-A5B4-CA005A8A29E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1559:*:*:long_term_support:*:*:*", "matchCriteriaId": "10692943-0205-42F3-8EBC-64499CC0A3D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1681:*:*:long_term_support:*:*:*", "matchCriteriaId": "F3DDAC1A-C2E5-4FFB-8A69-80819D39CF5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1822:*:*:long_term_support:*:*:*", "matchCriteriaId": "6201FA1A-1F94-46DF-A7EE-6F4DE2910131", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update1876:*:*:long_term_support:*:*:*", "matchCriteriaId": "E667A20B-65ED-434F-8A5F-220C87B175EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2009:*:*:long_term_support:*:*:*", "matchCriteriaId": "2CCE7E62-6CBE-476F-A9E5-52790F90E5BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2204:*:*:long_term_support:*:*:*", "matchCriteriaId": "920B4F3B-2D78-4B71-8B65-8AEF6AF2C735", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2395:*:*:long_term_support:*:*:*", "matchCriteriaId": "C1630066-82A7-45B6-8C9B-5E33544057E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2593:*:*:long_term_support:*:*:*", "matchCriteriaId": "A61BF475-18D9-4246-91C7-7A1B6A7B44AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2740:*:*:long_term_support:*:*:*", "matchCriteriaId": "DC90635A-4FEB-4F7A-B0BD-D4CCD1183A3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update2921:*:*:long_term_support:*:*:*", "matchCriteriaId": "6D12CADF-AAA4-4E0B-93EC-81C5C3BDCA47", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3165:*:*:long_term_support:*:*:*", "matchCriteriaId": "9FD0C979-641F-482B-9D05-B3B9A5F6D443", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3288:*:*:long_term_support:*:*:*", "matchCriteriaId": "F56F3E88-3E65-4C3E-932D-6C8404F5A1BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3445:*:*:long_term_support:*:*:*", "matchCriteriaId": "2FF0DE00-851E-4185-8C0C-172252E3E7C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3770:*:*:long_term_support:*:*:*", "matchCriteriaId": "3BBF5ADC-D0D4-4BF4-989F-84EAF7573855", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update3964:*:*:long_term_support:*:*:*", "matchCriteriaId": "87A77C12-0F5C-4EA7-96BA-8B14E2795E69", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4185:*:*:long_term_support:*:*:*", "matchCriteriaId": "87821A85-93F2-422B-8876-CF3729D99594", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4416:*:*:long_term_support:*:*:*", "matchCriteriaId": "0C3E959C-D6D5-4DF0-A26E-95EBDCB8C901", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4726:*:*:long_term_support:*:*:*", "matchCriteriaId": "F2F3C583-2A09-4448-B384-273B48D2B4E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update4959:*:*:long_term_support:*:*:*", "matchCriteriaId": "445BA171-0190-429A-8D4F-F857CEA5361E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5137:*:*:long_term_support:*:*:*", "matchCriteriaId": "95889F1E-931E-40E4-99A1-9C1A4A8B0847", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5394:*:*:long_term_support:*:*:*", "matchCriteriaId": "3E57A0B9-FD42-4BC2-8E77-473C231E8C26", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5512:*:*:long_term_support:*:*:*", "matchCriteriaId": "9A36042B-CE11-400C-A3E9-675FA01DFD79", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5761:*:*:long_term_support:*:*:*", "matchCriteriaId": "CA857632-5129-484C-9180-DC3B1A7A99E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update5953:*:*:long_term_support:*:*:*", "matchCriteriaId": "7504575F-3A63-4299-B355-682F495BD769", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6313:*:*:long_term_support:*:*:*", "matchCriteriaId": "C8B125A6-071C-40BD-BEF8-3349D69B8FBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6658:*:*:long_term_support:*:*:*", "matchCriteriaId": "78CC9093-3CB7-486A-AF1A-189EA52BBF43", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update6912:*:*:long_term_support:*:*:*", "matchCriteriaId": "166C9EC4-3A3A-437E-9B71-E8A95808454D", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7119:*:*:long_term_support:*:*:*", "matchCriteriaId": "45F6F599-6DFD-4FAC-A3BC-DA04337FBF99", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7303:*:*:long_term_support:*:*:*", "matchCriteriaId": "AF3BF95D-BE53-48CF-AC59-7E53B3245E84", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7476:*:*:long_term_support:*:*:*", "matchCriteriaId": "CA991E32-E28D-4310-8578-DD92033AEEB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7719:*:*:long_term_support:*:*:*", "matchCriteriaId": "41CFF915-1DD8-4C9F-8B43-04BCDA0C5068", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update7943:*:*:long_term_support:*:*:*", "matchCriteriaId": "C88FD401-BDA4-4080-B56D-D9A980236A9C", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8137:*:*:long_term_support:*:*:*", "matchCriteriaId": "56A61850-1C9F-420B-88CF-D2D92BF1709E", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8268:*:*:long_term_support:*:*:*", "matchCriteriaId": "6CEB092E-8D28-478E-BEA9-D489EC63D689", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update8438:*:*:long_term_support:*:*:*", "matchCriteriaId": "1CDA7299-C070-405E-BE53-1B235D6C5CC9", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0:update877:*:*:long_term_support:*:*:*", "matchCriteriaId": "BF1E7ABB-DEF9-4CBD-B269-3091DC1CF2A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:trendmicro:deep_security_agent:20.0.1:update690:*:*:long_term_support:*:*:*", "matchCriteriaId": "AF6B83AD-8517-4952-890B-4CF725407131", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*", "matchCriteriaId": "6A90CB3A-9BE7-475C-9E75-6ECAD2106302", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local attacker to escalate privileges on affected installations.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."}, {"lang": "es", "value": "Un enlace que sigue a una vulnerabilidad en los agentes Trend Micro Deep Security 20.x por debajo de la compilaci\u00f3n 20.0.1-3180 podr\u00eda permitir a un atacante local escalar privilegios en las instalaciones afectadas. Tenga en cuenta: un atacante primero debe obtener la capacidad de ejecutar c\u00f3digo con pocos privilegios en el sistema de destino para poder explotar esta vulnerabilidad."}], "id": "CVE-2024-36358", "lastModified": "2026-06-17T07:36:34.193", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security@trendmicro.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-36358", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2024-06-11T14:20:25.304200Z", "version": "2.0.3"}}]}, "published": "2024-06-10T22:15:11.230", "references": [{"source": "security@trendmicro.com", "tags": ["Broken Link"], "url": "https://success.trendmicro.com/dcx/s/solution/000298151"}, {"source": "security@trendmicro.com", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://success.trendmicro.com/dcx/s/solution/000298151"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-575/"}], "sourceIdentifier": "security@trendmicro.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1106"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{}