CVE-2022-45798

2022-12-2400:15:08

CWE-59

[email protected]

web.nvd.nist.gov

cve-2022-45798

vulnerability

privilege escalation

damage cleanup engine

trend micro apex one

apex one as a service

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

16.0%

JSON

A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected configurations

NVD

Node

trendmicroapex_oneMatch-saas

trendmicroapex_oneMatch2019-

AND

microsoftwindowsMatch-

CPENameOperatorVersion
trendmicro:apex_onetrendmicro apex oneeq-
trendmicro:apex_onetrendmicro apex oneeq2019

CPE	Name	Operator	Version
trendmicro:apex_one	trendmicro apex one	eq	-
trendmicro:apex_one	trendmicro apex one	eq	2019

CNA Affected

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex One",
    "versions": [
      {
        "version": "On Premise (14.0)",
        "status": "affected",
        "lessThan": "14.0.0.11136",
        "versionType": "semver"
      },
      {
        "version": "SaaS (14.0)",
        "status": "affected",
        "lessThan": "14.0.11840",
        "versionType": "semver"
      }
    ]
  }
]