CVE-2003-1341: Trend Micro OfficeScan

High severity, CVSS 7.5. EPSS: 7.7% chance of exploitation in the next 30 days.

The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe.

Affected products

• Trend Micro OfficeScan: version 3.0 only; version 3.1.1 only; version 3.5 only; version 3.11 only; version 3.13 only; version 3.54 only
• Trend Micro Virus Buster: version 3.52 only; version 3.53 only; version 3.54 only

Published 2003-12-31. Last modified 2026-06-16.