What’s Vulnerable › Vulnerabilities
CVE-2020-24559
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-09-01 · updated 2026-06-17
- Weakness: CWE-59
Description
A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as root. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected products
- Trend Micro Apex One: 2019, saas
- Trend Micro OfficeScan: xg-sp1
- Trend Micro Worry-Free Business Security: 10.0-sp1
- Trend Micro, Inc. Trend Micro Worry-Free Business Security Services: all versions
References
- https://success.trendmicro.com/solution/000263632
- https://success.trendmicro.com/solution/000267260
- https://www.zerodayinitiative.com/advisories/ZDI-20-1096/
- https://success.trendmicro.com/solution/000263632
- https://success.trendmicro.com/solution/000267260
- https://www.zerodayinitiative.com/advisories/ZDI-20-1096/
Get alerted when CVE-2020-24559 or the next vulnerability affects your stack