Physical Access Vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption

CVE-2023-28005

What is CVE-2023-28005?

This vulnerability pertains to Trend Micro's Endpoint Encryption Full Disk Encryption (TMEE FDE) where an attacker with physical access to a device can circumvent Microsoft's Secure Boot process. This could potentially enable the attacker to carry out further malicious activities aimed at gaining unauthorized access to the device's contents. It's imperative to note that while this vulnerability allows for exploitation, the encrypted data remains secure and inaccessible without additional attacks or methods.

References