CVE-2023-52325

published 2024-01-23

CVE-2023-52325: A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected…

Priority P3 53 high 7.5 CVSS 3.1

AV N AC H PR L UI N S U C H I H A H

A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations.

Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker must first obtain a valid set of credentials on target system in order to exploit this vulnerability.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
trend_micro_inc	trend_micro_apex_central	>= 2019 < 8.0.0.6570	8.0.0.6570
trendmicro	apex_central	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-98