DeutschShown in its original language — a full translation is planned for a future version.
Trend Micro Apex One: Mehrere Schwachstellen
view advisory published 2023-05-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um beliebigen Programmcode mit Administratorrechten ausführen, seine Privilegien erweitern, Informationen offenlegen oder Dateien manipulieren.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-32557US | critical9.8 | — | ||
A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server wh… | ||||
| CVE-2023-32556US | medium5.5 | — | ||
A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information.
Please note: an attack… | ||||
| CVE-2023-32555US | high7.0 | — | ||
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.… | ||||
| CVE-2023-32554US | high7.0 | — | ||
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.… | ||||
| CVE-2023-32553US | medium5.3 | — | ||
An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive inf… | ||||
| CVE-2023-32552US | medium5.3 | — | ||
An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to disclose sensitive inf… | ||||
| CVE-2023-30902US | medium5.5OT elevated | — | ||
A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro regis… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan