Trend Micro · Apex One and OfficeScan
CVE-2020-8599
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
Nedir
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.
CISA: Trend Micro Apex One and OfficeScan server contain a vulnerable EXE file that could allow a remote attacker to write data to a path on affected installations and bypass root login.
Ne yapmalı
Apply updates per vendor instructions.
ABD federal kurumları için son tarih: 3 Mayıs 2022
Trend Micro için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 3 Kas 2021 | Remote Code Execution | Apex One and OfficeScan | Yüksek 8,8 | 11% |
| 21 May 2026 | (On-Premise) Directory Traversal | Apex One | Orta 6,7 | 13% |
| 18 Ağu 2025 | OS Command Injection | Apex One | Kritik 9,4 | 25% |
| 21 Eyl 2023 | Remote Code Execution | Apex One and Worry-Free Business Security | Yüksek 7,2 | 4,2% |
| 15 Eyl 2022 | Improper Validation | Apex One and Apex One as a Service | Yüksek 7,2 | 3,4% |
| 31 Mar 2022 | Arbitrary File Upload | Apex Central | Kritik 9,8 | 19% |
| 3 Kas 2021 | Multiple Products Content Validation Escape | Apex One, OfficeScan and Worry-Free Business Security Agents | Yüksek 8,8 | 6,2% |
| 3 Kas 2021 | Directory Traversal | OfficeScan | Yüksek 8,8 | 25% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.