Trend Micro Virus Buster vulnerabilities

3 CVEs affecting Trend Micro Virus Buster, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2003-1341, published 2003-12-31.

More from Trend Micro.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2003-1341, published 2003-12-31. High severity, CVSS 7.5. EPSS: 7.7% chance of exploitation in the next 30 days. The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console…
• CVE-2001-1150, published 2001-08-22. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in cgiWebupdate.exe in Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.5.2 through 3.5.4 allows remote attackers to read arbitrary files.
• CVE-2001-1151, published 2001-10-15. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini…