CVE-2020-28575

6.7 mediumEPSS 0.7%

Medium (6.7) in trendmicro serverprotect. EPSS 0.7% chance of exploitation in the next 30 days.

A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this vulnerability.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2020-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:serverprotect

References

https://success.trendmicro.com/solution/000281950
https://www.zerodayinitiative.com/advisories/ZDI-20-1378/
https://success.trendmicro.com/solution/000281950
https://www.zerodayinitiative.com/advisories/ZDI-20-1378/

Check your stack JSON