CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2022-09-19
Trend Micro Apex One Remote Code Execution Vulnerability via Rollback Mechanism (CVE-2022-40139)
[Affected Scope] Trend Micro Apex One and Apex One as a Service client agents
[Impact] An attacker with administrative console access can force clients to execute unverified rollback packages, leading to Remote Code Execution (RCE) with SYSTEM privileges
[Mitigation] Apply the official Trend Micro security patches (CP 11136 / SP1 CP 11046 or higher) and restrict access to the admin console