CVE-2020-8599

Trend Micro Apex One and OfficeScan servers suffered an authentication bypass allowing remote attackers to write data and bypass root login.

The vulnerability in Trend Micro Apex One and OfficeScan allowed remote attackers to bypass authentication and write data to arbitrary paths, potentially leading to full system compromise. DIB organizations must ensure these endpoints are patched immediately, as the flaw was actively exploited in the wild and represents a significant supply-chain and endpoint security failure. Failure to patch exposes critical endpoint management systems to unauthorized access and data exfiltration.

Shame score — A critical authentication bypass in a widely deployed endpoint security product was actively exploited in the wild, demonstrating severe negligence in patch management and vulnerability disclosure.