Description (CNA)
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trend Micro / Trend Micro OfficeScan, Trend Micro Apex One | affected OfficeScan XG (12.0), Apex One 2019 (14.0) |
CWE
No CWE identifiers supplied.
References
- https://success.trendmicro.com/solution/000245571
- https://success.trendmicro.com/jp/solution/000244253
ADP enrichment
No English description supplied.
No English description supplied.