Description (CNA)
A DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an authenticated attacker to gain code execution and terminate the product's process - disabling endpoint protection. The attacker must have already gained authentication and have local access to the vulnerable system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trend Micro / Trend Micro OfficeScan | affected 11.0 SP1, XG (12.0) |
CWE
No CWE identifiers supplied.
References
- https://www.nsslabs.com/blog-posts/2019/7/24/your-advanced-endpoint-protection-aep-product-protects-your-computer-but-can-it-protect-itself
- https://success.trendmicro.com/solution/1123045
ADP enrichment
No English description supplied.