CVE-2023-32557

9.8CRITICAL

Key Information

Vendor
Trend Micro
Status
Trend Micro Apex One
Vendor
CVE Published:
26 June 2023

Summary

A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges.

Affected Version(s)

Trend Micro Apex One < 14.0.0.12024

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

  • Vulnerability Reserved.

Collectors

NVD DatabaseMitre Database
.