CVE-2022-40980 Vulnerability Details

  /     /     /  

CVE-2022-40980 Metadata Quick Info

CVE Published: 19/09/2022 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: trendmicro | Vendor: Trend Micro | Product: Trend Micro Mobile Security for Enterprise
Status : PUBLISHED

---

CVE-2022-40980 Description

A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Unauthenticated File Deletion
Source: Trend Micro

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).