CVE-2018-10507
MEDIUMTrend Micro OfficeScan <11.0 SP1 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-10507. PoCs published by hyp3rlinx.
AI-analyzed exploit summary This is a writeup describing a vulnerability in Trend Micro OfficeScan XG v11.0 where unauthorized changes can be made to bypass protection features. The exploit involves creating a user, modifying a service configuration, and restarting the system to gain control over protected processes.
Description
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.
Exploits (1)
This is a writeup describing a vulnerability in Trend Micro OfficeScan XG v11.0 where unauthorized changes can be made to bypass protection features. The exploit involves creating a user, modifying a service configuration, and restarting the system to gain control over protected processes.
References (3)
Scores
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N