Detections
Analytics
CVE-2020-8468
high
Description
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation escape vulnerability which could allow an attacker to manipulate certain agent client components. An attempted attack requires user authentication.
From the Tenable Blog
CVE-2020-8467, CVE-2020-8468: Vulnerabilities in Trend Micro Apex One and OfficeScan Exploited in the Wild
Published: 2020-03-17
Attempts to exploit multiple vulnerabilities in Trend Micro Apex One and OfficeScan observed in the wild.
References
https://vb2020.vblocalhost.com/uploads/VB2020-06.pdf
https://securelist.com/cactuspete-apt-groups-updated-bisonal-backdoor/97962/
https://blog.talosintelligence.com/2020/03/bisonal-10-years-of-play.html