Remote Code Execution Vulnerability in Trend Micro Mobile Security

CVE-2023-32527

Summary

A vulnerability in Trend Micro Mobile Security (Enterprise) version 9.8 SP5 allows remote attackers to execute arbitrary code through manipulated .php files. To exploit this flaw, attackers must first acquire low-privileged access to the target system. This vulnerability poses significant risks to the security of affected installations, enabling malicious users to potentially lead to further unauthorized actions on the compromised systems. Security teams should ensure prompt mitigation strategies are in place to protect against this threat.

References