CVE-2020-8470 in Apex One

Sumário

de MITRE

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 30/01/2020
• Moderação: aceite
• Entrada: VDB-151775
• CPE: pronto
• CWE: CWE-20 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.04584
• KEV: não
• Atividades: muito baixo
• Sector: Lawfirm, Telecommunication, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8470
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8470
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8470/