CVE-2020-28576: 
Trend Micro Apex One Agent vulnerability analysis and mitigation

CVE-2020-28576 is an improper access control information disclosure vulnerability affecting Trend Micro Apex One and OfficeScan XG SP1. The vulnerability was discovered and disclosed in November 2020. This security flaw could allow an unauthenticated user to connect to the product server and reveal version and build information (ZDI Advisory, NVD).

The vulnerability exists within the web console, which listens on TCP port 4343 by default. The issue stems from improper access control implementation that could allow information disclosure. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating that it is network-accessible, requires low attack complexity, and needs no privileges or user interaction to exploit (NVD).

The successful exploitation of this vulnerability allows remote attackers to disclose sensitive information from the affected installations. Specifically, attackers can reveal version and build information of the product server, which could potentially be used to identify vulnerable systems and aid in further targeted attacks (ZDI Advisory).

The vulnerability can be exploited remotely by an unauthenticated attacker. No special privileges or user interaction is required to exploit this vulnerability. The attack vector is network-based, making it accessible to any attacker who can reach the affected system over the network (ZDI Advisory).

Trend Micro has released updates to address this vulnerability. Users of affected products (Trend Micro Apex One and OfficeScan XG SP1) should apply the security updates provided by the vendor to mitigate this vulnerability (ZDI Advisory).