officescan Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/officescan/ Sun, 26 Feb 2023 06:43:27 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png officescan Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/officescan/ 32 32 CVE-2020-8599 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8599/ Sun, 26 Feb 2023 06:43:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8599/ Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

The post CVE-2020-8599 appeared first on CVE Vulnerability.

]]> Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

The post CVE-2020-8599 appeared first on CVE Vulnerability.

]]> CVE-2020-8598 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8598/ Sun, 26 Feb 2023 06:43:27 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8598/ Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

The post CVE-2020-8598 appeared first on CVE Vulnerability.

]]> Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

The post CVE-2020-8598 appeared first on CVE Vulnerability.

]]> CVE-2020-8470 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8470/ Sun, 26 Feb 2023 06:43:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8470/ Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

The post CVE-2020-8470 appeared first on CVE Vulnerability.

]]> Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

The post CVE-2020-8470 appeared first on CVE Vulnerability.

]]> CVE-2020-28583 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28583/ Sun, 26 Feb 2023 06:40:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28583/ An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information.

The post CVE-2020-28583 appeared first on CVE Vulnerability.

]]> An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version, build and patch information.

The post CVE-2020-28583 appeared first on CVE Vulnerability.

]]> CVE-2020-28582 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28582/ Sun, 26 Feb 2023 06:40:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28582/ An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents.

The post CVE-2020-28582 appeared first on CVE Vulnerability.

]]> An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal number of managed agents.

The post CVE-2020-28582 appeared first on CVE Vulnerability.

]]> CVE-2020-28577 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28577/ Sun, 26 Feb 2023 06:40:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28577/ An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.

The post CVE-2020-28577 appeared first on CVE Vulnerability.

]]> An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal server hostname and db names.

The post CVE-2020-28577 appeared first on CVE Vulnerability.

]]> CVE-2020-28576 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28576/ Sun, 26 Feb 2023 06:40:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28576/ An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information.

The post CVE-2020-28576 appeared first on CVE Vulnerability.

]]> An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal version and build information.

The post CVE-2020-28576 appeared first on CVE Vulnerability.

]]> CVE-2020-28573 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28573/ Sun, 26 Feb 2023 06:40:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28573/ An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server.

The post CVE-2020-28573 appeared first on CVE Vulnerability.

]]> An improper access control information disclosure vulnerability in Trend Micro Apex One and OfficeScan XG SP1 could allow an unauthenticated user to connect to the product server and reveal the total agents managed by the server.

The post CVE-2020-28573 appeared first on CVE Vulnerability.

]]> CVE-2020-24562 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24562/ Sun, 26 Feb 2023 06:39:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24562/ A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in […]

The post CVE-2020-24562 appeared first on CVE Vulnerability.

]]> A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This CVE is similar, but not identical to CVE-2020-24556.

The post CVE-2020-24562 appeared first on CVE Vulnerability.

]]> CVE-2020-24559 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24559/ Sun, 26 Feb 2023 06:39:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24559/ A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the […]

The post CVE-2020-24559 appeared first on CVE Vulnerability.

]]> A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2020-24559 appeared first on CVE Vulnerability.

]]>