PT-2020-1851 · Trend Micro · Trend Micro Apex One+1

Published 2020-03-16 · Updated 2025-10-31 · CVE-2020-8467

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One version 2019 Trend Micro OfficeScan XG

Description The vulnerability in the migration tool component of Trend Micro Apex One and OfficeScan could allow remote attackers to execute arbitrary code on affected installations. This is a remote code execution (RCE) issue. An attempted attack requires user authentication. The vulnerability is related to errors in code generation management.

Recommendations For Trend Micro Apex One version 2019, update to a version that includes the fix for this issue. For Trend Micro OfficeScan XG, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the migration tool component until a patch is available.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2020-01127

CVE-2020-8467

Affected Products

Officescan Xg

Trend Micro Apex One

References · 12

• https://success.trendmicro.com/solution/000245571 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01127 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8467 · Vendor Advisory
• https://success.trendmicro.com/jp/solution/000244253 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8467 · Security Note
• https://cybersecurity-help.cz/vdb/SB2020031809 · Note
• https://t.me/cvenotify/1835 · Telegram Post
• https://t.me/cveNotify/141112 · Telegram Post
• https://t.me/cvenotify/110284 · Telegram Post
• https://t.me/malwr/2808 · Telegram Post
• https://t.me/cvenotify/110379 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-8467 · Note