CVE-2024-51503
A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to remotely inject commands to other machines in the same domain. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability locally and must have domain user privileges to affect other machines.
Key facts
- CVSS score
- 8.0 (v3.1)
- Severity
- HIGH
- CVSS vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H- Weakness (CWE)
- CWE-78
- EPSS score
- 4.0% (90th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2024-45567)
- Published
- November 19, 2024
- NVD last modified
- June 17, 2026
- Status
- Analyzed
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2024-45567 in the EU Vulnerability Database. Last updated in EUVD on November 21, 2024.
View on the EU Vulnerability DatabaseAffected products
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
- trendmicro / deep security agent
and 14 more…
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- Trend Micro Deep Security 20 - Trend Micro Inc. - Common Criteria 561-LSS - active
References
- https://success.trendmicro.com/en-US/solution/KA-0018154(Vendor Advisory)
- https://www.zerodayinitiative.com/advisories/ZDI-24-1516/(Third Party Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain