CVE-2023-52325

2024-01-2320:41:25

trendmicro

www.cve.org

vulnerability

file inclusion

remote attacker

arbitrary code

trend micro apex central

widget

affected installations

exploitation

valid credentials

EPSS

0.006

Percentile

78.3%

JSON

A local file inclusion vulnerability in one of Trend Micro Apex Central’s widgets could allow a remote attacker to execute arbitrary code on affected installations.

Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker must first obtain a valid set of credentials on target system in order to exploit this vulnerability.

CNA Affected

[
  {
    "vendor": "Trend Micro, Inc.",
    "product": "Trend Micro Apex Central",
    "versions": [
      {
        "version": "2019",
        "status": "affected",
        "versionType": "semver",
        "lessThan": "8.0.0.6570"
      }
    ]
  }
]