by Kastro
Paper/Archive/CVE-2022-40980

CVE-2022-40980

Trend Micro Trend Micro Mobile Security for Enterprise — A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with…

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 68.8.688 × 2013.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.

Affected

ProductAffectedFixed inSource
Trend Micro Mobile Security for Enterprise9.8 SP5–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

reffiles.trendmicro.com/documentation/readme/tmms_sp5_cp2/tmms-ee_9.8_sp5_patch2_readme_server.txt