CVE-2020-28574
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-28574
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated attacker to exploit the vulnerability and modify or delete arbitrary files on the product's management console.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Trend Micro Worry-Free Business Security 路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Trend Micro Worry-Free Business Security是美国趋势科技（Trend Micro）公司的一套企业级信息安全防护解决方案。该产品提供反垃圾邮件、防病毒、网络安全和电子邮件保护等功能。 Trend Micro Worry-Free Business Security 10 SP1存在路径遍历漏洞，该漏洞源于一个未经身份验证的路径遍历任意远程文件删除漏洞，攻击者可利用该漏洞利用该漏洞并修改或删除产品管理控制台上的任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Trend Micro | Trend Micro Worry-Free Business Security | 10.0 SP1 | - |
II. Public POCs for CVE-2020-28574
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-28574
请登录查看更多情报信息。
- https://success.trendmicro.com/solution/000281948x_refsource_MISC
- https://www.tenable.com/security/research/tra-2020-62x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-28574
Same Patch Batch · Trend Micro · 2020-11-18 · 9 CVEs total
| CVE-2020-27695 | Trend Micro Security 2020 代码问题漏洞 | |
| CVE-2020-27696 | Trend Micro Security 2020 安全漏洞 | |
| CVE-2020-27697 | Trend Micro Security 2020 后置链接漏洞 | |
| CVE-2020-28572 | Trend Micro Apex One 安全漏洞 | |
| CVE-2020-28578 | Trend Micro InterScan Web Security Virtual Appliance 缓冲区错误漏洞 | |
| CVE-2020-28579 | Trend Micro InterScan Web Security Virtual Appliance 缓冲区错误漏洞 | |
| CVE-2020-28580 | Trend Micro InterScan Web Security Virtual Appliance 操作系统命令注入漏洞 | |
| CVE-2020-28581 | Trend Micro InterScan Web Security Virtual Appliance 操作系统命令注入漏洞 |
IV. Related Vulnerabilities
Same product: Trend Micro Worry-Free Business Security
- CVE-2022-23805
Trend Micro Worry-Free Business Security 缓冲区错误漏洞 - CVE-2021-45442
Trend Micro Worry-Free Business Security 后置链接漏洞 - CVE-2021-44020
Trend Micro Worry-Free Business Security 安全漏洞 - CVE-2021-44021
Trend Micro Worry-Free Business Security 安全漏洞 - CVE-2021-44019
Trend Micro Worry-Free Business Security 安全漏洞
V. Comments for CVE-2020-28574
No comments yet