{"id":"CVE-2020-25773","state":"PUBLISHED","title":"A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interaction is required to ex","description":"A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interaction is required to exploit this vulnerability in that the target must import a corrupted configuration file.","publishedAt":"2020-09-28T23:30:44.000Z","updatedAt":"2024-08-04T15:40:36.970Z","severity":null,"assigner":"trendmicro","products":["Trend Micro Trend Micro Apex One"],"affected":[{"vendor":"Trend Micro","product":"Trend Micro Apex One","versions":[{"version":"2009, SaaS","status":"affected"}]}],"references":["https://success.trendmicro.com/solution/000271974","https://www.zerodayinitiative.com/advisories/ZDI-20-1224/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:05.429Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/25xxx/CVE-2020-25773.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-25773","state":"PUBLISHED","datePublished":"2020-09-28T23:30:44.000Z","dateUpdated":"2024-08-04T15:40:36.970Z","assignerShortName":"trendmicro","assignerOrgId":"7f7bd7df-cffe-4fdb-ab6d-859363b89272","dateReserved":"2020-09-18T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interaction is required to exploit this vulnerability in that the target must import a corrupted configuration file."}],"affected":[{"vendor":"Trend Micro","product":"Trend Micro Apex One","versions":[{"version":"2009, SaaS","status":"affected"}]}],"references":[{"url":"https://success.trendmicro.com/solution/000271974","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1224/","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Double Free RCE","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"trendmicro","dateUpdated":"2020-09-28T23:30:44.000Z","orgId":"7f7bd7df-cffe-4fdb-ab6d-859363b89272"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@trendmicro.com","ID":"CVE-2020-25773","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Trend Micro Apex One","version":{"version_data":[{"version_value":"2009, SaaS"}]}}]},"vendor_name":"Trend Micro"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected products. User interaction is required to exploit this vulnerability in that the target must import a corrupted configuration file."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Double Free RCE"}]}]},"references":{"reference_data":[{"name":"https://success.trendmicro.com/solution/000271974","refsource":"MISC","url":"https://success.trendmicro.com/solution/000271974"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-20-1224/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1224/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://success.trendmicro.com/solution/000271974","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-20-1224/","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T15:40:36.970Z"}}]}}}