DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Trend Micro Apex One: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2022-11-21
Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Trend Micro Apex One ausnutzen, um Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen und seine Privilegien zu erweitern.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-44654US | high7.5 | — | ||
Affected builds of Trend Micro Apex One and Apex One as a Service contain a monitor engine component that is complied without the /SAFESEH memory protection mechanism which helps t… | ||||
| CVE-2022-44653US | high7.8 | — | ||
A security agent directory traversal vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected installations.… | ||||
| CVE-2022-44652US | high7.8 | — | ||
An improper handling of exceptional conditions vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to escalate privileges on affected insta… | ||||
| CVE-2022-44651US | high7.0 | — | ||
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.… | ||||
| CVE-2022-44650US | high7.8 | — | ||
A memory corruption vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privileges… | ||||
| CVE-2022-44649US | high7.8 | — | ||
An out-of-bounds access vulnerability in the Unauthorized Change Prevention service of Trend Micro Apex One and Apex One as a Service could allow a local attacker to elevate privil… | ||||
| CVE-2022-44648US | medium5.5 | — | ||
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations.
P… | ||||
| CVE-2022-44647US | medium5.5 | — | ||
An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations.
P… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan