CVE-2020-8470

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file that could allow an attacker to delete any file on the server with SYSTEM level privileges. Authentication is not required to exploit this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

Vendor	Product	Versions
Trend Micro	Trend Micro OfficeScan, Trend Micro Apex One, Trend Micro Worry-Free Business Security (WFBS)	OfficeScan XG (12.0), Apex One 2019 (14.0), WFBS 9.0, 9.5 and 10.0

References

https://success.trendmicro.com/jp/solution/000244253Patch, Vendor Advisory
https://success.trendmicro.com/jp/solution/000244836Patch, Vendor Advisory
https://success.trendmicro.com/solution/000245571Patch, Vendor Advisory
https://success.trendmicro.com/solution/000245572Patch, Vendor Advisory
https://success.trendmicro.com/jp/solution/000244253Patch, Vendor Advisory
https://success.trendmicro.com/jp/solution/000244836Patch, Vendor Advisory
https://success.trendmicro.com/solution/000245571Patch, Vendor Advisory
https://success.trendmicro.com/solution/000245572Patch, Vendor Advisory

Timeline

Published: Mar 18, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-84717.8For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 an CVE-2020-84727.8Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Co CVE-2020-84737.8Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to re CVE-2020-84747.8Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system CVE-2020-84757.5For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 an CVE-2020-84767.5For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 an CVE-2020-84778.8The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An a CVE-2020-84783.3Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC CVE-2020-84799.8For the Central Licensing Server component used in ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 an CVE-2020-84819.8For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Contro CVE-2020-84825.5Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privil CVE-2020-84847.8Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacke