Exposures › CVE-2019-18187

CVE-2019-18187

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2021-11-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-18187

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.

Players implicated

Trend Micro Inc. · vendor OfficeScan · product

Description

Trend Micro OfficeScan contains a directory traversal vulnerability by extracting files from a zip file to a specific folder on the OfficeScan server, leading to remote code execution.

Affected FedRAMP products 2 in the catalog

Product	Provider	Status	Match
Trend Micro Cloud One for Government	Trend Micro Inc.	In Process	vendor-exact · 0.90
Trend Micro Vision One for Government	Trend Micro Inc.	In Process	vendor-exact · 0.90