CVE-2018-10509: High severity trend micro officescan corporate edition vulnerability

Published Jun 12, 2018

Updated

A vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a attacker to exploit it via a Browser Refresh attack on vulnerable installations. An attacker must be using a AD logon user account in order to exploit this vulnerability.

Affected Software

3 affected components

trendmicro Officescan=11.0-sp1

trendmicro Officescan=xg

trendmicro Officescan=xg-sp1

Event History

Jun 12, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-10509?

CVE-2018-10509 is a vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG that could allow an attacker to exploit it via a Browser Refresh attack on vulnerable installations.

How severe is CVE-2018-10509?

CVE-2018-10509 has a severity rating of 8.8 (high).

How can an attacker exploit CVE-2018-10509?

An attacker can exploit CVE-2018-10509 by using a Browser Refresh attack on vulnerable installations, while logged in with an AD logon user account.

Which versions of Trend Micro OfficeScan are affected by CVE-2018-10509?

CVE-2018-10509 affects Trend Micro OfficeScan versions 11.0 SP1, XG, and XG SP1.

Is there a fix available for CVE-2018-10509?

Yes, a fix is available for CVE-2018-10509. Please refer to the official Trend Micro website for more information.