Rewterz Threat Alert – Scanning & Exploiting IPs Observed

Rewterz Threat Advisory – CVE-2019-0283 – SAP NetWeaver Process Integration Multiple Vulnerabilities

April 10, 2019

Rewterz Threat Advisory – CVE-2019-9489 Trend Micro OfficeScan XG Data Manipulation Vulnerability

Severity

Medium

Analysis Summary

CVE-2019-9489
A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) could allow an attacker to modify arbitrary files on the affected product’s management console.

Impact

Manipulation of data

Affected Vendors

Trend Micro

Affected Products

Trend Micro OfficeScan XG
The vulnerability is reported in versions prior to Server Build 1933 and Agent Build 1812 running on Windows.
Trend Micro OfficeScan 11.0

Remediation

Vendor has released patch/update for the following vulnerability.

Apply osce_xg_win_en_criticalpatch_1933.exe

osce_xg_sp1_win_en_criticalpatch_5338.exe

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo

Full Name *

Email Address *

Contact Number

Company Name

Country