CVE-2020-8468highunder attackCWE-74

CVE-2020-8468: high-severity vulnerability in Trend Micro OfficeScan, Trend Micro Apex One…

Published · Updated

Follow this CVE+ Monitor Trend Micro Apex One+ Monitor Trend Micro OfficeScan

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and 1 threat group(s) use it.

ssvc Actcvss 8.8epss 6.2%
from disclosure to weapon
Published on NVDMar 18
CISA KEV+595d
Who exploits it — 1

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateTonto Team🇨🇳 MITRE ATT&CK
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

A flaw in Trend Micro security software allows authenticated users to bypass content validation and manipulate agent components, potentially compromising the security tool itself.

Technical detail

CWE-74 content validation escape vulnerability in Trend Micro Apex One, OfficeScan XG, and Worry-Free Business Security agents permits authenticated attackers to manipulate client components through improper input validation. Exploitation requires valid user credentials and affects agent functionality.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Trend Micro · Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS)
Related CVEs — Trend Micro OfficeScan, Trend Micro Apex One…

In the same product, most dangerous first.

CVE-2020-8598—CVE-2020-8598EPSS 13.2%CVE-2020-8470—CVE-2020-8470EPSS 4.6%