CVE-2020-8598: trend micro trend micro officescan, trend micro apex one, trend micro worry-free business security (wfbs)
Vulnerability summary
CVE-2020-8598 is a high (CVSS 10.0) vulnerability in trend micro trend micro officescan, trend micro apex one, trend micro worry-free business security (wfbs). EPSS estimates a 13.24% chance of exploitation in the next 30 days, higher than 96.3% of scored vulnerabilities.
Timeline
- 18-03-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow a remote attacker to execute arbitrary code on affected installations with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
13.24%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 13.24% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Trendmicro3 products
- apex_one2019
- officescanxg | xg:sp1
- worry-free_business_security9.0:sp3 | 9.5 | 10.0 | 10.0:sp1
Trend micro1 product
- trend micro officescan, trend micro apex one, trend micro worry-free business security (wfbs)OfficeScan XG (12.0), Apex One 2019 (14.0), WFBS 9.0, 9.5 and 10.0
2 vendors · 4 products