Unauthorized Access Vulnerability in Trend Micro Antivirus One
CVE-2024-45334

7.8HIGH

Key Information:

Vendor

Trend Micro
Status
Trend Micro Antivirus One
Vendor
CVE Published:
22 October 2024

What is CVE-2024-45334?

Trend Micro Antivirus One versions 3.10.4 and below are susceptible to an Arbitrary Configuration Update vulnerability. This flaw enables attackers to gain unauthorized access to critical product configurations and functions, potentially compromising system integrity and user security. Proper measures should be taken to review and update the affected products to prevent exploitation.

Affected Version(s)

Trend Micro Antivirus One 3.10.4 < 3.10.6

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-14461

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.