CVE-2022-40140: Trend Micro Apex One Origin Validation Error Denial-of-Service Vulnerability
An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-40140?
CVE-2022-40140 is a vulnerability in Trend Micro Apex One Security Agent that allows local attackers to create a denial-of-service condition.
How can an attacker exploit CVE-2022-40140?
An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
What is the severity of CVE-2022-40140?
CVE-2022-40140 has a severity value of 5.5, which is considered medium.
What software is affected by CVE-2022-40140?
Trend Micro Apex One Security Agent, Trend Micro Apex Central, and Trend Micro Trend Micro Apex One and Worry-Free Business Security are affected by this vulnerability.
How can I fix CVE-2022-40140?
To fix CVE-2022-40140, apply the necessary security patches provided by Trend Micro.