CVE-2018-18331: High severity trend micro officescan corporate edition vulnerability

Published Dec 21, 2018

Updated

A Trend Micro OfficeScan XG weak file permissions vulnerability on a particular folder for a particular group may allow an attacker to alter the files, which could lead to other exploits on vulnerable installations.

Affected Software

2 affected components

trendmicro Officescan=xg

Microsoft Windows

Remediation

Patch Available

https://success.trendmicro.com/solution/1121674

Event History

Dec 21, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-18331?

CVE-2018-18331 is a vulnerability in Trend Micro OfficeScan XG, where weak file permissions on a specific folder for a particular group could allow an attacker to alter files.

How severe is CVE-2018-18331?

CVE-2018-18331 has a severity rating of 7.5 (High).

Which software versions are affected by CVE-2018-18331?

CVE-2018-18331 affects all versions of Trend Micro OfficeScan XG.

How can an attacker exploit CVE-2018-18331?

An attacker can exploit CVE-2018-18331 by altering files in a specific folder, which could lead to other exploits on vulnerable installations.

How can I fix CVE-2018-18331?

To fix CVE-2018-18331, it is recommended to apply the necessary patches or updates provided by Trend Micro OfficeScan XG.