CVE-2020-24561

9.1 criticalEPSS 4.4%

Critical (9.1) in trendmicro serverprotect. EPSS 4.4% chance of exploitation in the next 30 days.

A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileges on the SPLX console to exploit this vulnerability.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS: 4.4% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2020-09-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:serverprotect

References

https://success.trendmicro.com/solution/000268419
https://success.trendmicro.com/solution/000268419

Check your stack JSON