CVE-2020-28574: Path Traversal
A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-28574?
CVE-2020-28574 is a vulnerability in Trend Micro Worry-Free Business Security 10 SP1 that allows an unauthenticated attacker to modify or delete arbitrary files on the product's management console.
How severe is CVE-2020-28574?
CVE-2020-28574 is rated as high severity with a CVSS score of 7.5.
How can an attacker exploit CVE-2020-28574?
An attacker can exploit CVE-2020-28574 by leveraging an unauthenticated path traversal vulnerability to modify or delete arbitrary files on the management console.
Which version of Trend Micro Worry-Free Business Security is affected by CVE-2020-28574?
CVE-2020-28574 affects Trend Micro Worry-Free Business Security 10 SP1.
Is there a fix for CVE-2020-28574?
Yes, Trend Micro has released a fix for CVE-2020-28574. Please refer to the vendor's advisory for details.