Trend Micro Apex One Multiple Vulnerabilities (KA-0020652)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(252287);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/08/19");

  script_cve_id("CVE-2025-54948", "CVE-2025-54987");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2025/09/08");

  script_name(english:"Trend Micro Apex One Multiple Vulnerabilities (KA-0020652)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Windows host is running an application that is affected by multiple vulnerabilities.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One
prior to SP1 (Server Build 14081 and Agent Build 14081). It is, therefore, affected by multiple vulnerabilities,
including the following:

  - A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated 
    remote attacker to upload malicious code and execute commands on affected installations. (CVE-2025-54948)

  - A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated 
    remote attacker to upload malicious code and execute commands on affected installations. This 
    vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture. 
    (CVE-2025-54987)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version   
number.");
  script_set_attribute(attribute:"see_also", value:"https://success.trendmicro.com/en-US/solution/KA-0020652");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Apex One SP1 (b14081/14081) or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-54948");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/05");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/08/05");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/08/19");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:trendmicro:apex_one");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("trendmicro_apex_one_win_installed.nbin");
  script_require_keys("installed_sw/Trend Micro Apex One");

  exit(0);
}

include('vcf.inc');

var app = 'Trend Micro Apex One';

var app_info = vcf::get_app_info(app:app, win_local:TRUE);

app_info.display_version = app_info.version;

var constraints = [ 
  { 'min_version' : '14.0.0', 'max_version' : '14.0.0.14038', 'fixed_display' : '14.0.0.14081 - Service Pack SP1 b14081'},
  { 'equal' : '14.0.0.14039',  'fixed_display' : '14.0.0.14081 - Service Pack SP1 b14081', 'require_paranoia' : true}

];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);