CVE-2020-8470 : What You Need to Know

Trend Micro Apex One (2019), OfficeScan XG, and Worry-Free Business Security (9.0, 9.5, 10.0) server contain a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges.

Understanding CVE-2020-8470

This CVE involves a vulnerability in Trend Micro security products that could be exploited by an attacker to delete files on the server without requiring authentication.

What is CVE-2020-8470?

The vulnerability in Trend Micro products allows unauthorized deletion of files on the server, posing a significant security risk.

The Impact of CVE-2020-8470

Exploiting this vulnerability could lead to unauthorized deletion of critical files on the server, potentially causing data loss or system disruption.

Technical Details of CVE-2020-8470

Trend Micro security products are affected by a vulnerability that enables unauthorized file deletion on the server.

Vulnerability Description

The vulnerable service DLL file in Trend Micro Apex One, OfficeScan XG, and Worry-Free Business Security allows attackers to delete files with SYSTEM level privileges.

Affected Systems and Versions

Products: Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS)
Versions: OfficeScan XG (12.0), Apex One 2019 (14.0), WFBS 9.0, 9.5, and 10.0

Exploitation Mechanism

Attackers can exploit this vulnerability to delete any file on the server without the need for authentication, potentially causing severe damage.

Mitigation and Prevention

Taking immediate steps and implementing long-term security practices are crucial to mitigate the risks associated with CVE-2020-8470.

Immediate Steps to Take

Apply security patches provided by Trend Micro promptly.
Monitor server logs for any suspicious activities.
Restrict network access to vulnerable servers.

Long-Term Security Practices

Regularly update and patch all software and security products.
Conduct security audits and penetration testing to identify vulnerabilities.
Educate employees on cybersecurity best practices.

Patching and Updates

Ensure that all Trend Micro products, especially OfficeScan XG, Apex One, and WFBS, are updated with the latest patches to address the vulnerability.