CVE ID | CVE-2018-10514 |
CVSS SCORE | 7.2, AV:L/AC:L/Au:N/C:C/I:C/A:C |
AFFECTED VENDORS |
Trend Micro |
AFFECTED PRODUCTS |
Maximum Security |
VULNERABILITY DETAILS |
The specific flaw exists within processing of request ID 0x2ff0000b in request ID_AMSP_MASTER by the coreServiceShell service. The service does not properly impersonate the client before executing sensitive operations. An attacker can leverage this vulnerability to escalate privileges to SYSTEM. |
ADDITIONAL DETAILS |
Trend Micro has issued an update to correct this vulnerability. More details can be found at:
https://esupport.trendmicro.com/en-US/home/pages/technical-support/1120742.aspx |
DISCLOSURE TIMELINE |
|
CREDIT | Anonymous |