High severity · published Dec 21, 2018
CVE-2018-18332
A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on…
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
A Trend Micro OfficeScan XG weak file permissions vulnerability may allow an attacker to potentially manipulate permissions on some key files to modify other files and folders on vulnerable installations.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Officescan · Trendmicro
xg · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-18332
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-18332
Mitigation
https://success.trendmicro.com/solution/1121674
More from Officescan
9.8
CVE-2020-8599
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
8.8
CVE-2021-36741
Trend Micro Multiple Products Improper Input Validation Vulnerability
8.8
CVE-2020-8467
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability
8.8
CVE-2020-8468
Trend Micro Multiple Products Content Validation Escape Vulnerability
7.8
CVE-2021-36742
Trend Micro Multiple Products Improper Input Validation Vulnerability