Lucene search

TrendmicroCVE-2018-10509

HistoryJun 12, 2018 - 5:29 p.m.

CVE-2018-10509

2018-06-1217:29:00

trendmicro

web.nvd.nist.gov

trend micro

officescan

vulnerability

exploit

browser refresh

attack

logon

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An attacker must be using a AD logon user account in order to exploit this vulnerability.

Affected configurations

Nvd

Node

trendmicroofficescanMatch11.0sp1

trendmicroofficescanMatchxg

trendmicroofficescanMatchxgsp1

VendorProductVersionCPE
trendmicroofficescan11.0cpe:2.3:a:trendmicro:officescan:11.0:sp1:*:*:*:*:*:*
trendmicroofficescanxgcpe:2.3:a:trendmicro:officescan:xg:*:*:*:*:*:*:*
trendmicroofficescanxgcpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendmicro	officescan	11.0	cpe:2.3:a:trendmicro:officescan:11.0:sp1::::::
trendmicro	officescan	xg	cpe:2.3:a:trendmicro:officescan:xg:::::::*
trendmicro	officescan	xg	cpe:2.3:a:trendmicro:officescan:xg:sp1::::::

CNA Affected

[
  {
    "product": "Trend Micro OfficeScan",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "11.0 SP1, XG"
      }
    ]
  }
]

References

success.trendmicro.com/solution/1119961

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.001

Percentile

42.8%

JSON

Related for CVE-2018-10509