// For flags

CVE-2018-10507

TrendMicro OfficeScan XG 11.0 - Change Prevention Bypass

Severity Score

4.4
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.

Una vulnerabilidad en Trend Micro OfficeScan 11.0 SP1 y XG podrĂ­a permitir que un atacante siga una serie de pasos para omitir o hacer que OfficeScan Unauthorized Change Prevention deje de funcionar en instalaciones vulnerables. El atacante tiene que tener privilegios de administrador para explotar esta vulnerabilidad.

OfficeScan XG version 11.0 suffers from an unauthorized change prevention bypass vulnerability.

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
Partial
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2018-04-27 CVE Reserved
  • 2018-06-08 CVE Published
  • 2023-06-06 EPSS Updated
  • 2024-08-05 CVE Updated
  • 2024-08-05 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Trendmicro
Search vendor "Trendmicro"
Officescan
Search vendor "Trendmicro" for product "Officescan"
11.0
Search vendor "Trendmicro" for product "Officescan" and version "11.0"
sp1
Affected
Trendmicro
Search vendor "Trendmicro"
Officescan
Search vendor "Trendmicro" for product "Officescan"
xg
Search vendor "Trendmicro" for product "Officescan" and version "xg"
-
Affected
Trendmicro
Search vendor "Trendmicro"
Officescan
Search vendor "Trendmicro" for product "Officescan"
xg
Search vendor "Trendmicro" for product "Officescan" and version "xg"
sp1
Affected