Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious fil

Summary

Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when executed.

Timeline

1. Oct 21, 2019Public exploit on Exploit-DB

   EDB-47527

2. Oct 21, 2019, 6:35 PM UTCCVE published
3. Aug 4, 2024, 9:54 PM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• Trend Micro Trend Micro Anti-Threat Toolkit (ATTK)

  Version range not reported

References 8