CVE-2020-24557 - Trend Micro Apex One, OfficeScan, and Worry-Free Business Security
AI Vulnerability ContextA vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note...
Overview
A source-backed snapshot of this vulnerability.
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
Vulnerability status
How serious this vulnerability is and whether it is known to be exploited.
- CVE ID
- CVE-2020-24557
- Vendor/project
- Trend Micro
- Product
- Apex One, OfficeScan, and Worry-Free Business Security
- Vulnerability name
- Trend Micro Multiple Products Improper Access Control Vulnerability
- Date added
- 2021-11-03
- Due date
- 2022-05-03
- Known ransomware campaign use
- Unknown
- CVSS v3
- 7.8
Exploit context
What the vulnerability is about.
A vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 on Microsoft Windows may allow an attacker to manipulate a particular product folder to disable the security temporarily, abuse a specific Windows function and attain privilege escalation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Please note that version 1909 (OS Build 18363.719) of Microsoft Windows 10 mitigates hard links, but previous versions are affected.
Source evidence
Original public records and references for this page.
Original source
Original source links
Open the public records and source datasets used for this page.