CVE-2018-10507

published 2018-06-12

CVE-2018-10507: A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized…

Priority P4 25 medium 4.4 CVSS 3.0

AV L AC L PR H UI N S U C N I H A N

EXPLOIT

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
trend_micro	trend_micro_officescan	—	—
trendmicro	officescan	—	—
trendmicro	officescan	—	—

CVSS provenance

nvd v3.0 4.4 MEDIUM CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:N/I:P/A:N

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.