Ransomware Upgrades with Credential-Stealing Tricks

Ransomware Upgrades with Credential-Stealing Tricks
Enterprise VulnerabilitiesFrom DHS/US-CERT's National Vulnerability Database CVE-2020-7227PUBLISHED: 2020-01-18

Westermo MRD-315 1.7.3 and 1.7.4 devices have an information disclosure vulnerability that allows an authenticated remote attacker to retrieve the source code of different functions of the web application via requests that lack certain mandatory parameters. This affects ifaces-diag.asp, system.asp, ...

CVE-2019-15625PUBLISHED: 2020-01-18

A memory usage vulnerability exists in Trend Micro Password Manager 3.8 that could allow an attacker with access and permissions to the victim's memory processes to extract sensitive information.

CVE-2019-19696PUBLISHED: 2020-01-18

A RootCA vulnerability found in Trend Micro Password Manager for Windows and macOS exists where the localhost.key of RootCA.crt might be improperly accessed by an unauthorized party and could be used to create malicious self-signed SSL certificates, allowing an attacker to misdirect a user to phishi...

CVE-2019-19697PUBLISHED: 2020-01-18

An arbitrary code execution vulnerability exists in the Trend Micro Security 2019 (v15) consumer family of products which could allow an attacker to gain elevated privileges and tamper with protected services by disabling or otherwise preventing them to start. An attacker must already have administr...

CVE-2019-20357PUBLISHED: 2020-01-18

A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products ..

Support the originator by clicking the read the rest link below.