Security News > 2020 > March > Trend Micro Patches Two Vulnerabilities Exploited in the Wild

Trend Micro Patches Two Vulnerabilities Exploited in the Wild
2020-03-18 05:08

Trend Micro has patched several serious vulnerabilities in its Worry-Free Business Security, Apex One and OfficeScan products, including a couple of flaws that have been exploited in the wild.

The exploited vulnerabilities were identified by Trend Micro's own researchers, but no information has been released about the attacks.

This is not the first time malicious actors have exploited vulnerabilities in Trend Micro products.

The Trend Micro advisories describing the Apex One and OfficeScan vulnerabilities also inform users that the two products are affected by three other critical weaknesses and these can be exploited without authentication.

The third vulnerability is related to an EXE file and it can allow a remote attacker to "Write arbitrary data to an arbitrary path on affected installations and bypass root login." Trend Micro says there is no evidence that these vulnerabilities have been exploited for malicious purposes.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/CfXX-_qpJ2g/trend-micro-patches-two-vulnerabilities-exploited-wild