CVE-2022-45797: High severity trend micro apex one vulnerability

Published Dec 1, 2022

Updated

An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Software

6 affected components

trendmicro Apex One

trendmicro Apex One=2019

Microsoft Windows

All of the following

Any of the following

trendmicro Apex One

trendmicro Apex One=2019

Microsoft Windows

Event History

Dec 1, 2022

CVE Published

via MITRE·02:12 PM

Data Sourced

via MITRE·02:12 PM

Description

Dec 12, 2022

Data Sourced

via NVD·09:15 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2022-45797.

What is the severity of CVE-2022-45797?

The severity of CVE-2022-45797 is high with a CVSS score of 7.1.

Which software products are affected by CVE-2022-45797?

Trend Micro Apex One and Trend Micro Apex One as a Service are affected by CVE-2022-45797.

How can an attacker exploit CVE-2022-45797?

An attacker must first obtain the ability to execute arbitrary code on an affected installation to exploit CVE-2022-45797.

Is there a fix available for CVE-2022-45797?

Yes, Trend Micro has provided a solution for CVE-2022-45797. Please refer to the reference link for more details.