CVE-2020-8467

HIGH KEV

Trend Micro Apex One/OFFICE SCAN XG - RCE

Title source: llm

Description

A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.

References (3)

Scores

CVSS v3 8.8
EPSS 0.3111
EPSS Percentile 96.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2021-11-03
VulnCheck KEV 2020-03-16
InTheWild.io 2020-03-16
ENISA EUVD EUVD-2020-29333
Status published
Products (2)
trendmicro/apex_one 2019
trendmicro/officescan xg (2 CPE variants)
Published Mar 18, 2020
KEV Added Nov 03, 2021
Tracked Since Feb 18, 2026