CVE-2023-32528

🗓️ 26 Jun 2023 21:54:13Reported by trendmicroType

Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files, allowing remote attacker to execute arbitrary code. Attacker must first obtain ability to execute low-privileged code on the target system in order to exploit this vulnerability. Similar to CVE-2023-32527.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2023-32528	27 Jun 202302:24	–	circl
CNNVD	Trend Micro Mobile Security for Enterprise 安全漏洞	26 Jun 202300:00	–	cnnvd
CVE	CVE-2023-32528	26 Jun 202321:54	–	cve
EUVD	EUVD-2023-36772	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Security updates for multiple Trend Micro products for enterprises (June 2023)	14 Jun 202305:47	–	jvn
NVD	CVE-2023-32528	26 Jun 202322:15	–	nvd
OSV	CVE-2023-32527	26 Jun 202322:15	–	osv
OSV	CVE-2023-32528	26 Jun 202322:15	–	osv
Prion	Design/Logic Flaw	26 Jun 202322:15	–	prion
Prion	Design/Logic Flaw	26 Jun 202322:15	–	prion

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Moibile Security for Enterprise",
    "versions": [
      {
        "version": "9.8 SP5",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "9.8.3294"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-23-591/
success	www.success.trendmicro.com/dcx/s/solution/000293106

26 Jun 2023 21:54Current

9.2High risk

Vulners AI Score9.2

EPSS0.02992