ГлавнаяУязвимости → CVE-2023-52325
7.5высокая

CVE-2023-52325

Описание

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker must first obtain a valid set of credentials on target system in order to exploit this vulnerability.

Затрагиваемое ПО
Trendmicro Apex central
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://success.trendmicro.com/dcx/s/solution/000296153?language=en_UShttps://www.zerodayinitiative.com/advisories/ZDI-24-024/https://success.trendmicro.com/dcx/s/solution/000296153?language=en_UShttps://www.zerodayinitiative.com/advisories/ZDI-24-024/