VULNERABILITY INTELLIGENCE
CVE-2018-18332
CVSS score7.5 HIGH
EPSS probability1.37%
CISA KEVNot currently listed
Published2018-12-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations.
Weakness classification
- CWE-732: Incorrect Permission Assignment for Critical Resource
Primary references
- security@trendmicro.com — Mitigation, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory