CVE-2018-10507

Опубликовано: 12 июн. 2018

Источник: nvd

CVSS3: 4.4

CVSS2: 2.1

EPSS Низкий

Описание

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.

Ссылки

http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt
Exploit
Third Party Advisory
https://success.trendmicro.com/solution/1119961
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/44858/
Exploit
Third Party Advisory
VDB Entry
http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt
Exploit
Third Party Advisory
https://success.trendmicro.com/solution/1119961
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/44858/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*

cpe:2.3:a:trendmicro:officescan:xg:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00796

Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-9mjm-gvpm-vf93