CVE-2020-8599

Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

Apex One

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

18. Mär 2020

Ausgewertete Quellen

• Hersteller
  https://success.trendmicro.com/jp/solution/000244253
• Hersteller
  https://success.trendmicro.com/solution/000245571
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8599
• CISA
  Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
• NVD
  CVE-2020-8599