Trend Micro Virus Buster vulnerabilities

3 vulnerabilities

Known vulnerabilities in Trend Micro Virus Buster, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2003-1341trend_microofficescan+1
EPSS score
7.66%
The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.5CVE-2001-1151trend_microofficescan+1
EPSS score
2.41%
Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.5CVE-2001-1150trend_microofficescan+1
EPSS score
2.45%
Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files.