{"id":"CVE-2020-8607","state":"PUBLISHED","title":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode","description":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.","publishedAt":"2020-08-05T14:05:23.000Z","updatedAt":"2024-08-04T10:03:46.363Z","severity":null,"assigner":"trendmicro","products":["Trend Micro Trend Micro Apex One","Trend Micro Trend Micro OfficeScan","Trend Micro Trend Micro Deep Security","Trend Micro Trend Micro Worry-Free Business Security","Trend Micro Trend Micro Security (Consumer Family)","Trend Micro Trend Micro Safe Lock","Trend Micro Trend Micro ServerProtect","Trend Micro Trend Micro Portable Security","Trend Micro Trend Micro HouseCall","Trend Micro Trend Micro Anti-Threat Toolkit (ATTK)","Trend Micro Trend Micro Rootkit Buster"],"affected":[{"vendor":"Trend Micro","product":"Trend Micro Apex One","versions":[{"version":"2019 (On premise), SaaS","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro OfficeScan","versions":[{"version":"XG SP1","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Deep Security","versions":[{"version":"12.x, 11.x. 10.x","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Worry-Free Business Security","versions":[{"version":"10.0 SP1, Services (SaaS)","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Security (Consumer Family)","versions":[{"version":"2020 (v16), 2019 (v15)","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Safe Lock","versions":[{"version":"2.0 SP1, TXOne Ed","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro ServerProtect","versions":[{"version":"SPFS 6.0, SPNAF 5.8, SPEMC 5.8, SPNT 5.8","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Portable Security","versions":[{"version":"3.x, 2.x","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro HouseCall","versions":[{"version":"8.0","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Anti-Threat Toolkit (ATTK)","versions":[{"version":"1.62.1240 and below","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Rootkit Buster","versions":[{"version":"2.2","status":"affected"}]}],"references":["https://success.trendmicro.com/solution/000260713","https://success.trendmicro.com/jp/solution/000260748","https://jvn.jp/vu/JVNVU99160193/","https://jvn.jp/en/vu/JVNVU99160193/index.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:44.297Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/8xxx/CVE-2020-8607.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-8607","state":"PUBLISHED","datePublished":"2020-08-05T14:05:23.000Z","dateUpdated":"2024-08-04T10:03:46.363Z","assignerShortName":"trendmicro","assignerOrgId":"7f7bd7df-cffe-4fdb-ab6d-859363b89272","dateReserved":"2020-02-04T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability."}],"affected":[{"vendor":"Trend Micro","product":"Trend Micro Apex One","versions":[{"version":"2019 (On premise), SaaS","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro OfficeScan","versions":[{"version":"XG SP1","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Deep Security","versions":[{"version":"12.x, 11.x. 10.x","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Worry-Free Business Security","versions":[{"version":"10.0 SP1, Services (SaaS)","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Security (Consumer Family)","versions":[{"version":"2020 (v16), 2019 (v15)","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Safe Lock","versions":[{"version":"2.0 SP1, TXOne Ed","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro ServerProtect","versions":[{"version":"SPFS 6.0, SPNAF 5.8, SPEMC 5.8, SPNT 5.8","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Portable Security","versions":[{"version":"3.x, 2.x","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro HouseCall","versions":[{"version":"8.0","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Anti-Threat Toolkit (ATTK)","versions":[{"version":"1.62.1240 and below","status":"affected"}]},{"vendor":"Trend Micro","product":"Trend Micro Rootkit Buster","versions":[{"version":"2.2","status":"affected"}]}],"references":[{"url":"https://success.trendmicro.com/solution/000260713","tags":["x_refsource_MISC"]},{"url":"https://success.trendmicro.com/jp/solution/000260748","tags":["x_refsource_MISC"]},{"url":"https://jvn.jp/vu/JVNVU99160193/","tags":["x_refsource_MISC"]},{"url":"https://jvn.jp/en/vu/JVNVU99160193/index.html","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Improper Input Validation","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"trendmicro","dateUpdated":"2020-08-05T14:05:22.000Z","orgId":"7f7bd7df-cffe-4fdb-ab6d-859363b89272"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@trendmicro.com","ID":"CVE-2020-8607","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Trend Micro Apex One","version":{"version_data":[{"version_value":"2019 (On premise), SaaS"}]}},{"product_name":"Trend Micro OfficeScan","version":{"version_data":[{"version_value":"XG SP1"}]}},{"product_name":"Trend Micro Deep Security","version":{"version_data":[{"version_value":"12.x, 11.x. 10.x"}]}},{"product_name":"Trend Micro Worry-Free Business Security","version":{"version_data":[{"version_value":"10.0 SP1, Services (SaaS)"}]}},{"product_name":"Trend Micro Security (Consumer Family)","version":{"version_data":[{"version_value":"2020 (v16), 2019 (v15)"}]}},{"product_name":"Trend Micro Safe Lock","version":{"version_data":[{"version_value":"2.0 SP1, TXOne Ed"}]}},{"product_name":"Trend Micro ServerProtect","version":{"version_data":[{"version_value":"SPFS 6.0, SPNAF 5.8, SPEMC 5.8, SPNT 5.8"}]}},{"product_name":"Trend Micro Portable Security","version":{"version_data":[{"version_value":"3.x, 2.x"}]}},{"product_name":"Trend Micro HouseCall","version":{"version_data":[{"version_value":"8.0"}]}},{"product_name":"Trend Micro Anti-Threat Toolkit (ATTK)","version":{"version_data":[{"version_value":"1.62.1240 and below"}]}},{"product_name":"Trend Micro Rootkit Buster","version":{"version_data":[{"version_value":"2.2"}]}}]},"vendor_name":"Trend Micro"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Improper Input Validation"}]}]},"references":{"reference_data":[{"name":"https://success.trendmicro.com/solution/000260713","refsource":"MISC","url":"https://success.trendmicro.com/solution/000260713"},{"name":"https://success.trendmicro.com/jp/solution/000260748","refsource":"MISC","url":"https://success.trendmicro.com/jp/solution/000260748"},{"name":"https://jvn.jp/vu/JVNVU99160193/","refsource":"MISC","url":"https://jvn.jp/vu/JVNVU99160193/"},{"name":"https://jvn.jp/en/vu/JVNVU99160193/index.html","refsource":"MISC","url":"https://jvn.jp/en/vu/JVNVU99160193/index.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://success.trendmicro.com/solution/000260713","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://success.trendmicro.com/jp/solution/000260748","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://jvn.jp/vu/JVNVU99160193/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://jvn.jp/en/vu/JVNVU99160193/index.html","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T10:03:46.363Z"}}]}}}