PT-2020-20153 · Trend Micro · Trend Micro Interscan Web Security Virtual Appliance

Wolfgang Ettlinger · Published 2020-12-17 · Updated 2021-07-21 · CVE-2020-8465

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro InterScan Web Security Virtual Appliance (affected versions not specified)

Description The issue concerns a vulnerability in the Trend Micro InterScan Web Security Virtual Appliance. No specific details about the nature of the vulnerability, affected devices, or real-world incidents are provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

CSRF

Weakness Enumeration

CWE-287

CWE-352

Related Identifiers

CVE-2020-8465

Affected Products

Trend Micro Interscan Web Security Virtual Appliance

References · 7

• 🔥 https://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-trend-micro-interscan-web-security-virtual-appliance · Exploit
• https://osv.dev/vulnerability/CVE-2020-8465 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8465 · Security Note
• https://success.trendmicro.com/solution/000283077 · Vendor Advisory
• https://t.me/cvenotify/7269 · Telegram Post
• https://t.me/cybersecuritytechnologies/2317 · Telegram Post
• https://t.me/cibsecurity/21019 · Telegram Post