Trend Micro Patched Zero-Day Vulnerabilities Under Active Exploit

  •  
  •  
  •  
  • 1
  •  
  •  
  •  
    1
    Share

Trend Micro has recently addressed numerous security flaws across different products. Of the two zero-day vulnerabilities in Trend Micro products also caught the attention of cyber criminals before receiving  a fix.

Trend Micro Zero-Day Vulnerabilities

In a recent advisory, Trend Micro has revealed details about numerous security flaws in different products. These vulnerabilities primarily existed in Trend Micro Apex One and OfficeScan XG, which also include two zero-day bugs.

The first of the zero-days include a critical vulnerability (CVE-2020-8467) that allowed remote code execution attacks. The flaw existed in the migration tool component of Apex One and OfficeScan. Though, an attempted attack required user authentication.

The second zero-day, CVE-2020-8468, was a high severity content validation escape vulnerability that also required user authentication. Upon an exploit, the bug allowed an adversary to manipulate agent client components.

Besides, these two vulnerabilities, there were also three other bugs in Trend Micro Apex One and OfficeScan. While not exploited, all three vulnerabilities received a critical severity rating with a CVSS score of 10. All three did not require any user authentication for exploitation.

Two of these include CVE-2020-8470 and CVE-2020-8598 which existed due to vulnerable service DLL file that gave SYSTEM privileges to the attacker and arbitrary SYSTEM file deletion and code execution, respectively, on the target systems.

The third vulnerability, CVE-2020-8599, existed due to a vulnerable EXE file on Trend Micro Apex One and OfficeScan server.

Patches Rolled-Out

As elaborated in the advisory, all five vulnerabilities affected the Trend Micro Apex One version 2019, and OfficeScan versions XG SP1 and XG (non-SP).

Upon detecting the bugs, the vendors fixed them and released the patches with Apex One* (on-premise) version CP 2117 and OfficeScan version XG SP1 CP 5474 and XG CP 1988.

In their advisory, Trend Micro also confirmed detection of active exploitation of the two zero-day vulnerabilities.

Trend Micro has observed active attempts of potential attacks against at least one of these vulnerabilities in the wild (ITW).

They urge all the users to update their systems to the patched versions ASAP.

Let us know your thoughts in the comments.

The following two tabs change content below.

Abeerah Hashim

Abeerah has been a passionate blogger for several years with a particular interest towards science and technology. She is crazy to know everything about the latest tech developments. Knowing and writing about cybersecurity, hacking, and spying has always enchanted her. When she is not writing, what else can be a better pastime than web surfing and staying updated about the tech world! Reach out to me at: [email protected]

Abeerah Hashim

Abeerah has been a passionate blogger for several years with a particular interest towards science and technology. She is crazy to know everything about the latest tech developments. Knowing and writing about cybersecurity, hacking, and spying has always enchanted her. When she is not writing, what else can be a better pastime than web surfing and staying updated about the tech world! Reach out to me at: [email protected]

Do NOT follow this link or you will be banned from the site!