CVE-2020-8599

2020-03-1800:30:44

trendmicro

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.175

Percentile

96.1%

JSON

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro OfficeScan, Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "OfficeScan XG (12.0), Apex One 2019 (14.0)"
      }
    ]
  }
]