CVE-2020-25772: 
Trend Micro Apex One Agent vulnerability analysis and mitigation

CVE-2020-25772 is an out-of-bounds read information disclosure vulnerability affecting Trend Micro Apex One. The vulnerability was discovered and reported to the vendor on May 13, 2020, and was publicly disclosed on September 25, 2020. This vulnerability affects Trend Micro Apex One 2019 and Apex One SaaS installations (ZDI Advisory, NVD).

The vulnerability exists within the scanServer64 module and results from the lack of proper validation of user-supplied data, which can lead to a read past the end of an allocated buffer. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating local access is required with low attack complexity (ZDI Advisory).

If successfully exploited, this vulnerability allows local attackers to disclose sensitive information to an unprivileged account on affected installations. The vulnerability can potentially be leveraged in conjunction with other vulnerabilities to escalate privileges and execute code in the context of SYSTEM (ZDI Advisory).

To exploit this vulnerability, an attacker must first obtain the ability to execute low-privileged code on the target system. The vulnerability is unique compared to similar CVEs such as CVE-2020-24564 and CVE-2020-25771 due to the specific subsystems affected (NVD).

Trend Micro has issued an update to correct this vulnerability. Users are advised to apply the security patch available through the vendor's solution center (ZDI Advisory).