Back to KEVs

CVE-2020-8599

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an...

Basic Information

CVE State: PUBLISHED
Reserved Date: February 04, 2020
Published Date: March 18, 2020
Last Updated: February 06, 2025
Vendor: Trend Micro
Product: Trend Micro OfficeScan, Trend Micro Apex One
Description: Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

CVSS Scores

SSVC Information

Exploitation: active
Automatable: Yes
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (added 2021-11-03 00:00:00 UTC) Source

References

https://success.trendmicro.com/solution/000245571 https://success.trendmicro.com/jp/solution/000244253

Known Exploited Vulnerability Information

Source	Added Date
CISA	2021-11-03 00:00:00 UTC