CVE-2023-32557: Path Traversal
A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the Management Server which could lead to remote code execution with system privileges.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-32557?
CVE-2023-32557 is a path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service.
How can an unauthenticated attacker exploit CVE-2023-32557?
An unauthenticated attacker can exploit CVE-2023-32557 by uploading an arbitrary file to the Management Server, which could lead to remote code execution with system privileges.
Which versions of Trend Micro Apex One are affected by CVE-2023-32557?
Trend Micro Apex One versions up to 14.0.12105 and 2019 are affected by CVE-2023-32557.
What is the severity rating of CVE-2023-32557?
CVE-2023-32557 has a severity rating of 9.8 (critical).
How can I fix CVE-2023-32557?
To fix CVE-2023-32557, update Trend Micro Apex One to a version that is not vulnerable or apply the necessary patches provided by Trend Micro.