Vulnerability Details CVE-2020-8470
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 9.4
References
- https://success.trendmicro.com/jp/solution/000244253
- https://success.trendmicro.com/jp/solution/000244836
- https://success.trendmicro.com/solution/000245571
- https://success.trendmicro.com/solution/000245572
- https://success.trendmicro.com/jp/solution/000244253
- https://success.trendmicro.com/jp/solution/000244836
- https://success.trendmicro.com/solution/000245571
- https://success.trendmicro.com/solution/000245572
Products affected by CVE-2020-8470
-
cpe:2.3:a:trendmicro:apex_one:2019
-
cpe:2.3:a:trendmicro:officescan:xg
-
cpe:2.3:a:trendmicro:worry-free_business_security:10.0
-
cpe:2.3:a:trendmicro:worry-free_business_security:9.0
-
cpe:2.3:a:trendmicro:worry-free_business_security:9.5