Service DLL Vulnerability in Trend Micro Security Products
CVE-2020-8470

7.5HIGH

Key Information:

Vendor: Trend Micro
Status: Trend Micro Officescan, Trend Micro Apex One, Trend Micro Worry-free Business Security (wfbs)
Vendor: CVE Published:; 18 March 2020

🔔 Create Trend Micro Vulnerability Alert

What is CVE-2020-8470?

A critical vulnerability in the server components of Trend Micro's Apex One, OfficeScan XG, and Worry-Free Business Security products allows an attacker to exploit a flawed service DLL file. This flaw enables attackers, with no authentication required, to delete any files on the server, posing a significant risk to data integrity and server operations. Organizations using these products must apply the necessary patches to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS) OfficeScan XG (12.0), Apex One 2019 (14.0), WFBS 9.0, 9.5 and 10.0