Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 17, 2020 · Catalog

   Detected

   A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.

2. Nov 3, 2021 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. May 3, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.

Affected

• cpe trendmicro/apex one2019
• cpe trendmicro/officescanxg
• vendor Trend Micro Apex One and OfficeScanversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2020-8467

  Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution.

  cisa.gov
• CVE.orgVulnerability recordCVE-2020-8467

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2020-8467

  30-day exploitation probability 10.9%

  first.org
• NIST NVDVulnerability recordCVE-2020-8467

  A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to execute arbitrary code on affected installations (RCE). An attempted attack requires user authentication.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• Patch · success.trendmicro.com
• Patch · success.trendmicro.com
• US Government Resource · cisa.gov