CVE-2018-10507

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.

Score

CVSS 3.0 4.4 Medium

Status

Modified - security@trendmicro.com

Published

2018-06-12

Last modified

2024-08-05

Affected products

• Trend Micro Officescan (Trend Micro)
• Officescan (Trendmicro)

References

• http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS…
• https://success.trendmicro.com/solution/1119961
• https://www.exploit-db.com/exploits/44858/