CVE-2022-40143

2022-09-1918:01:05

trendmicro

www.cve.org

cve-2022-40143

trend micro

apex one

local privilege escalation

low-privileged user

arbitrary code

elevated privileges

AI Score

8.9

Confidence

High

EPSS

Percentile

15.9%

JSON

A link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service servers could allow a local attacker to abuse an insecure directory that could allow a low-privileged user to run arbitrary code with elevated privileges. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019 (on-prem) and SaaS"
      }
    ]
  }
]