CVE-2019-15627 EXPLOIT
7.1
HIGH · CVSS 3.1 · EPSS 1.3% (pctl 70)
Patch early
A public exploit exists.
Description
Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.
Scoring
| CVSS | 7.1 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
| EPSS | 1.31% — more likely to be exploited than 70% of all CVEs |
| Weakness | CWE-59 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2019-10-17 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | windows |
| trendmicro | deep security |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite | 2019-12-06 |
References
- http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html
- https://success.trendmicro.com/solution/000149495
- http://packetstormsecurity.com/files/155579/Trend-Micro-Deep-Security-Agent-11-Arbitrary-File-Overwrite.html
- https://success.trendmicro.com/solution/000149495
→ the Explorer · watch your stack · NVD