Discord Server Red Security Twitter Donation to Red Security Red Security Youtube Channel Red Security Tumblr Profile
Login or Register to Hide ads and Accessing all features on the forum


Trend Micro Patched Zero-Day Vulnerabilities Under Active Exploit

0 Replies, 1609 Views

In The Name OF Allah
Al-Salam Alekum

[Image: Ouel11KH_400x400.png]

Well done, under active attack

Quote:In a recent advisory, Trend Micro has revealed details about numerous security flaws in different products. These vulnerabilities primarily existed in Trend Micro Apex One and OfficeScan XG, which also include two zero-day bugs.

The first of the zero-days include a critical vulnerability (CVE-2020-8467) that allowed remote code execution attacks. The flaw existed in the migration tool component of Apex One and OfficeScan. Though, an attempted attack required user authentication.

The second zero-day, CVE-2020-8468, was a high severity content validation escape vulnerability that also required user authentication. Upon an exploit, the bug allowed an adversary to manipulate agent client components.

Besides, these two vulnerabilities, there were also three other bugs in Trend Micro Apex One and OfficeScan. While not exploited, all three vulnerabilities received a critical severity rating with a CVSS score of 10. All three did not require any user authentication for exploitation.

The Source

Wa Salam Alekum
* Thankful to Allah *

Possibly Related Threads…
Thread Author Replies Views Last Post
Star News Claroty Details Vulnerabilities in Schneider PLCs News 0 1,864 11-11-2020, 09:07 AM
Last Post: News
Star News Google Project Zero Discloses Nasty Windows 0-Day Security Exploit Already In The Wi News 0 1,885 11-01-2020, 06:12 AM
Last Post: News
Star News US Warns: Hackers Chaining Zerologon, Other Vulnerabilities News 0 2,006 10-11-2020, 01:15 PM
Last Post: News
Star News APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elect News 0 1,922 10-10-2020, 07:06 AM
Last Post: News
Star News Homeland Security Issues Urgent Windows Security Warning Over Zerologon Exploit News 0 1,653 09-21-2020, 09:26 AM
Last Post: News
Star News Four More Bugs Patched in Microsoft’s Azure Sphere IoT Platform News 0 1,574 08-26-2020, 03:41 AM
Last Post: News
Wink News Mozilla Firefox 75 Is Out With Fixes For RCE vulnerabilities Mr.Kurd 0 1,875 04-13-2020, 01:13 PM
Last Post: Mr.Kurd
Rainbow News Microsoft Alerts Users Of Zero-Day RCE Vulnerability In Windows 7 Under Active Exploi Mr.Kurd 0 1,694 03-26-2020, 09:03 AM
Last Post: Mr.Kurd
Exclamation News Hackers Exploiting 2 Unpatched Windows 0-Day Vulnerabilities in Wide – Microsoft Warn Mr.Kurd 0 2,003 03-24-2020, 07:56 AM
Last Post: Mr.Kurd
Rainbow News Researchers Find Security Vulnerabilities In Some of The Top Password Managers Mr.Kurd 0 1,708 03-23-2020, 08:02 AM
Last Post: Mr.Kurd

Users browsing this thread: 1 Guest(s)