description: Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary data to an arbitrary path on affected installations and bypass ROOT login. Authentication is not required to exploit this vulnerability.
problem types: Arbitrary File Upload Directory Traversal
affected:
{
product: Trend Micro OfficeScan, Trend Micro Apex One
vendor: Trend Micro
versions:
status: affected, version: OfficeScan XG (12.0), Apex One 2019 (14.0)
}