CVEvulnerability
CVE-2018-10507
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.4 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.
Affected configurations
• trendmicro officescan 11.0
• trendmicro officescan xg
References
- http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt Exploit, Third Party Advisory
- https://success.trendmicro.com/solution/1119961 Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/44858/ Exploit, Third Party Advisory, VDB Entry
- http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt Exploit, Third Party Advisory
- https://success.trendmicro.com/solution/1119961 Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/44858/ Exploit, Third Party Advisory, VDB Entry