VYPR
← All advisories
Medium severity6.7NVD Advisory· Published Aug 5, 2020· Updated Jun 17, 2026

CVE-2020-8607

CVE-2020-8607

Description

An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or potentially lead to code execution in kernel mode. An attacker must already have obtained administrator access on the target machine (either legitimately or via a separate unrelated attack) to exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

36
  • Trend Micro/Antivirus Toolkit
    cpe:2.3:a:trendmicro:antivirus_toolkit:*:*:*:*:*:*:*:*
    Range: <1.62.1240
  • Trend Micro/Apex One2 versions
    cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:apex_one:saas:*:*:*:*:*:*:*
  • Trend Micro/Deep Security4 versions
    cpe:2.3:a:trendmicro:deep_security:10.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:trendmicro:deep_security:10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security:12.0:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:deep_security:9.6:*:*:*:*:*:*:*
  • Trend Micro/Officescan
    cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*
  • Trend Micro/Officescan Business Security3 versions
    cpe:2.3:a:trendmicro:officescan_business_security:10.0:sp1:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:trendmicro:officescan_business_security:10.0:sp1:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:officescan_business_security:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:officescan_business_security:9.5:*:*:*:*:*:*:*
  • Trend Micro/Officescan Business Security Service
    cpe:2.3:a:trendmicro:officescan_business_security_service:-:*:*:*:*:*:*:*
  • Trend Micro/Officescan Cloud2 versions
    cpe:2.3:a:trendmicro:officescan_cloud:15:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:officescan_cloud:15:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:officescan_cloud:16.0:*:*:*:*:*:*:*
  • Trend Micro/Online Scan
    cpe:2.3:a:trendmicro:online_scan:8.0:*:*:*:*:*:*:*
  • Trend Micro/Portable Security2 versions
    cpe:2.3:a:trendmicro:portable_security:2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:portable_security:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:trendmicro:portable_security:3.0:*:*:*:*:*:*:*
  • Trend Micro/Rootkit Buster
    cpe:2.3:a:trendmicro:rootkit_buster:2.2:*:*:*:*:*:*:*
  • Trend Micro/Safe Lock2 versions
    cpe:2.3:a:trendmicro:safe_lock:-:*:*:*:txone:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:safe_lock:-:*:*:*:txone:*:*:*
    • cpe:2.3:a:trendmicro:safe_lock:2.0:sp1:*:*:-:*:*:*
  • Trend Micro/Serverprotect4 versions
    cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:emc:*:*+ 3 more
    • cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:emc:*:*
    • cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:netware:*:*
    • cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:windows:*:*
    • cpe:2.3:a:trendmicro:serverprotect:6.0:*:*:*:*:storage:*:*
  • Trend Micro/Trend Micro productsllm-create
  • Trend Micro/Anti Threat Toolkitcpe-rescue
    Range: 1.62.1240 and below
  • Trend Micro/Trend Micro Apex Onev5
    Range: 2019 (On premise), SaaS
  • Trend Micro/Internet Securitycpe-rescue
    Range: 12.x, 11.x. 10.x
  • Trend Micro/Trend Micro HouseCallv5
    Range: 8.0
  • Trend Micro/Trend Micro OfficeScanv5
    Range: XG SP1
  • Trend Micro/Trend Micro Security (Consumer) 2020cpe-rescue2 versions
    3.x, 2.x+ 1 more
    • (no CPE)range: 3.x, 2.x
    • (no CPE)range: 2020 (v16), 2019 (v15)
  • Trend Micro/Ransom Bustercpe-rescue
    Range: 2.2
  • Trend Micro/Trend Micro Safe Lockv5
    Range: 2.0 SP1, TXOne Ed
  • Trend Micro/Trend Micro ServerProtectv5
    Range: SPFS 6.0, SPNAF 5.8, SPEMC 5.8, SPNT 5.8
  • Trend Micro/Worry Free Business Securitycpe-rescue
    Range: 10.0 SP1, Services (SaaS)

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.