CVE-2023-25143

9.8CRITICAL

Key Information

Vendor
Trend Micro
Status
Trend Micro Apex One
Vendor
CVE Published:
10 March 2023

Summary

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products.

Affected Version(s)

Trend Micro Apex One < 14.0.0.11564

Refferences

https://success.trendmicro.com/solution/000292209

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.