trendmicro apex-one CVE-2020-8470 vulnerability in TrendMicro Products
Published on March 18, 2020

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

NVD


Products Associated with CVE-2020-8470

Want to know whenever a new CVE is published for TrendMicro products? stack.watch will email you.

TrendMicro Apex One
 
TrendMicro Officescan
 
TrendMicro Worry Free Business Security
 

Affected Versions

Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) Version OfficeScan XG (12.0), Apex One 2019 (14.0), WFBS 9.0, 9.5 and 10.0 is affected by CVE-2020-8470

Exploit Probability

EPSS
1.12%
Percentile
78.07%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.