medium4.4Public exploit code
CVE-2018-10507
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Chan…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TrendMicro OfficeScan XG 11.0 - Change Prevention Bypass2018-06-08 · local · windows · Verified
Impact
A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Officescan | Versions 11.0, xg |
References
- NVD record
- CVE.org record
- http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt
- https://success.trendmicro.com/solution/1119961
- https://www.exploit-db.com/exploits/44858/
- http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CHANGE-PREVENTION-SERVICE-BYPASS.txt
- https://success.trendmicro.com/solution/1119961
- https://www.exploit-db.com/exploits/44858/