Lucene search

K
cve[email protected]CVE-2023-28005
HistoryMar 22, 2023 - 6:15 a.m.

CVE-2023-28005

2023-03-2206:15:10
web.nvd.nist.gov
20
cve-2023-28005
trend micro
endpoint encryption
full disk encryption
vulnerability
secure boot
physical access
nvd

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.8%

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the device.

An attacker must first obtain physical access to the target system in order to exploit this vulnerability. It is also important to note that the contents of the drive(s) encrypted with TMEE FDE would still be protected and would NOT be accessible by the attacker by exploitation of this vulnerability alone.

Affected configurations

NVD
Node
trendmicrotrend_micro_endpoint_encryptionRange6.0.0.3204
AND
microsoftwindowsMatch-

CNA Affected

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Endpoint Encryption Full Disk Encryption",
    "versions": [
      {
        "version": "6.0",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "6.0.0.3323"
      }
    ]
  }
]

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.8%

Related for CVE-2023-28005