CVE-2020-8599

Опубликовано: 18 мар. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Средний

Описание

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

Ссылки

https://success.trendmicro.com/jp/solution/000244253
Broken Link
Patch
Vendor Advisory
https://success.trendmicro.com/solution/000245571
Broken Link
Patch
Vendor Advisory
https://success.trendmicro.com/jp/solution/000244253
Broken Link
Patch
Vendor Advisory
https://success.trendmicro.com/solution/000245571
Broken Link
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8599
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:officescan:xg:-:*:*:*:*:*:*

cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.5786

Средний

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-r3h3-2xcv-m95h