SB2020031809 - Multiple vulnerabilities in Trend Micro Apex One and OfficeScan
Published: March 18, 2020
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 6 secuirty vulnerabilities.
1) Code Injection (CVE-ID: CVE-2020-8467)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation in the migration tool component. A remote authenticated attacker can send a specially crafted request and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Note: the vulnerability is being actively exploited in the wild.
2) Input validation error (CVE-ID: CVE-2020-8468)
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to a content validation escape issue. A remote authenticated attacker can pass specially crafted input to the application and manipulate certain agent client components.
Note: the vulnerability is being actively exploited in the wild.
3) Insecure DLL loading (CVE-ID: CVE-2020-8470)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to the application loads DLL libraries in an insecure manner. A remote attacker can use a specially crafted .dll file and delete any file on the server with SYSTEM level privileges.
4) Insecure DLL loading (CVE-ID: CVE-2020-8598)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to the application loads DLL libraries in an insecure manner. A remote attacker can use a specially crafted .dll file and execute arbitrary code on the target system with SYSTEM level privileges.
5) Input validation error (CVE-ID: CVE-2020-8599)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to unspecified error, related to input validation. A remote attacker can write arbitrary data to an arbitrary path on affected installations and compromise the affected system.
6) Path traversal (CVE-ID: CVE-2020-8600)
The vulnerability allows a remote attacker to perform directory traversal attacks.
The vulnerability exists due to input validation error when processing directory traversal sequences in the "TempFileName" parameter provided to the "cgiRecvFile.exe" endpoint. A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system, allowing to manipulate a key file to bypass authentication.
Remediation
Install update from vendor's website.