CVEs-PoC/2022/CVE-2022-23120.md

CVE-2022-23120

Description

A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.

POC

Reference

• https://success.trendmicro.com/solution/000290104
• https://www.modzero.com/advisories/MZ-21-02-Trendmicro.txt

Github

• https://github.com/0xStrygwyr/OSCP-Guide
• https://github.com/0xZipp0/OSCP
• https://github.com/0xsyr0/OSCP
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Ly0nt4r/OSCP
• https://github.com/SenukDias/OSCP_cheat
• https://github.com/SirElmard/ethical_hacking
• https://github.com/e-hakson/OSCP
• https://github.com/eljosep/OSCP-Guide
• https://github.com/kgwanjala/oscp-cheatsheet
• https://github.com/modzero/MZ-21-02-Trendmicro
• https://github.com/nitishbadole/oscp-note-3
• https://github.com/oscpname/OSCP_cheat
• https://github.com/revanmalang/OSCP
• https://github.com/txuswashere/OSCP
• https://github.com/xhref/OSCP