CVE-2020-24562: Trend Micro OfficeScan Hard Link Privilege Escalation Vulnerability
First published: Mon Sep 28 2020(Updated: )
A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escalation and code execution. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This CVE is similar, but not identical to CVE-2020-24556.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Officescan | =xg-sp1 | |
| Microsoft Windows | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-24562.
What is the severity of CVE-2020-24562?
The severity of CVE-2020-24562 is high, with a severity value of 7.8.
What software is affected by CVE-2020-24562?
The affected software is Trend Micro OfficeScan.
How can this vulnerability be exploited?
This vulnerability can be exploited by local attackers who have obtained the ability to execute low-privileged code on the target system.
Is Microsoft Windows vulnerable to CVE-2020-24562?
No, Microsoft Windows is not vulnerable to CVE-2020-24562.
- collector/nvd-index
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-20-1226
- alias/ZDI-CAN-10794
- alias/CVE-2020-24562
- agent/software-canonical-lookup
- agent/tags
- agent/event
- agent/trending
- vendor/trendmicro
- canonical/trendmicro officescan
- version/trendmicro officescan/xg-sp1
- vendor/microsoft
- canonical/microsoft windows
- vendor/trend micro
- canonical/trend micro officescan