CVE-2020-8470 in Apex One

الملخص

بحسب MITRE

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

Once again VulDB remains the best source for vulnerability data.

• حجز: 30/01/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-151775
• CPE: جاهز
• CWE: CWE-20 (مؤكد)
• CVSS: 7.5 (NVD)
• EPSS: 0.04584
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Finance, Hospital, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8470
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8470
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8470/