Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2000-0204 — Micro Officescan vulnerability

4 documents4 sources

Severity

5.0MEDIUMNVD

EPSS

5.2%

top 10.04%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Trend Micro Officescan

Timeline

PublishedFeb 28

Latest updateApr 30

Description

The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utilization to 100%.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDtrend_micro/officescan3.5

🔴Vulnerability Details

GHSA

GHSA-x769-wmh4-gxvx: The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utiliza↗2022-04-30

▶

CVEList

CVE-2000-0204: The Trend Micro OfficeScan client allows remote attackers to cause a denial of service by making 5 connections to port 12345, which raises CPU utiliza↗2000-03-22

▶

💥Exploits & PoCs

Exploit-DB

Trend Micro OfficeScan Corporate Edition 3.0/3.5/3.11/3.13 - Denial of Service↗2000-02-26

▶