Trend Micro Patched Zero-Day Vulnerabilities Under Active Exploit

Trend Micro has recently addressed numerous security flaws across different products. Of the two zero-day vulnerabilities in Trend Micro products also caught the attention of cyber criminals before receiving  a fix.

In a recent advisory, Trend Micro has revealed details about numerous security flaws in different products. These vulnerabilities primarily existed in Trend Micro Apex One and OfficeScan XG, which also include two zero-day bugs.

The first of the zero-days include a critical vulnerability (CVE-2020-8467) that allowed remote code execution attacks. The flaw existed in the migration tool component of Apex One and OfficeScan. Though, an attempted attack required user authentication.

The second zero-day, CVE-2020-8468, was a high severity content validation escape vulnerability that also required user authentication. Upon an exploit, the bug allowed an adversary to manipulate agent client components.

Besides, these two vulnerabilities, there were also three other bugs in Trend Micro Apex One and OfficeScan. While not exploited, all three vulnerabilities received a critical severity rating with a CVSS score of 10. All three did not require any user authentication for exploitation.

Two of these include CVE-2020-8470 and CVE-2020-8598 which existed due to vulnerable service DLL file that gave SYSTEM privileges to the attacker and arbitrary SYSTEM file deletion and code execution, respectively, on the target systems.

The third vulnerability, CVE-2020-8599, existed due to a vulnerable EXE file on Trend Micro Apex One and OfficeScan server.

As elaborated in the advisory, all five vulnerabilities affected the Trend Micro Apex One version 2019, and OfficeScan versions XG SP1 and XG (non-SP).

You Might Also Like