CVE-2018-10507

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to take a series of steps to bypass or render the OfficeScan Unauthorized Change Prevention inoperable on vulnerable installations. An attacker must already have administrator privileges in order to exploit this vulnerability.

CVSS v3.0

4.4 MEDIUMCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

2.1 LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

1.36% chance of exploitation in the next 30 days, 70th percentile

Published

2018-06-12

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://hyp3rlinx.altervista.org/advisories/TRENDMICRO-OFFICESCAN-XG-v11.0-UNAUTHORIZED-CH…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/44858

References

• CVE Record
• NVD entry

Related

• CVE-2018-10504
• CVE-2018-10515
• CVE-2018-10503
• CVE-2018-10516
• CVE-2018-1049
• CVE-2018-10517