Vulnerability · Published Sep 19, 2022 · Assigned by trendmicro
CVE-2022-40980
Critical 9.1
In plain English
A critical-severity security flaw in Trend Micro Mobile Security for Enterprise from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 69% of all known vulnerabilities).
Severity (CVSS NVD)9.1Critical
Exploit odds (30 days)1.2%top 31.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with access to the Management Server to delete files. This issue was resolved in 9.8 SP5 Critical Patch 2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro Mobile Security for Enterprise | 9.8 SP5 |