Vulnerability Details CVE-2020-8598
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.085
EPSS Ranking 91.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
- https://success.trendmicro.com/jp/solution/000244253
- https://success.trendmicro.com/jp/solution/000244836
- https://success.trendmicro.com/solution/000245571
- https://success.trendmicro.com/solution/000245572
- https://success.trendmicro.com/jp/solution/000244253
- https://success.trendmicro.com/jp/solution/000244836
- https://success.trendmicro.com/solution/000245571
- https://success.trendmicro.com/solution/000245572
Products affected by CVE-2020-8598
-
cpe:2.3:a:trendmicro:apex_one:2019
-
cpe:2.3:a:trendmicro:officescan:xg
-
cpe:2.3:a:trendmicro:worry-free_business_security:10.0
-
cpe:2.3:a:trendmicro:worry-free_business_security:9.0
-
cpe:2.3:a:trendmicro:worry-free_business_security:9.5