VULNERABILITY INTELLIGENCE

CVE-2020-8599

CVSS score9.8 CRITICAL

EPSS probability11.86%

CISA KEVKnown exploited vulnerability

Published2020-03-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability

Vendor / product: Trend Micro / Apex One and OfficeScan

Description

Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.

Primary references

security@trendmicro.com — Broken Link, Patch, Vendor Advisory
security@trendmicro.com — Broken Link, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource