Lucene search

K
nvd[email protected]NVD:CVE-2022-44648
HistoryDec 12, 2022 - 1:15 p.m.

CVE-2022-44648

2022-12-1213:15:15
CWE-125
web.nvd.nist.gov
out-of-bounds read
trend micro
apex one
apex one as a service
local attacker
sensitive information
low-privileged code
cve-2022-44648
cve-2022-44647

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

16.1%

An Out-of-bounds read vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information on affected installations.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

This is similar to, but not the same as CVE-2022-44647.

Affected configurations

NVD
Node
trendmicroapex_oneRange<14.0.11789saas
OR
trendmicroapex_oneMatch2019
AND
microsoftwindowsMatch-

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

16.1%

Related for NVD:CVE-2022-44648