CVE-2023-52325: Trend Micro Apex Central widget WFProxy Local File Inclusion Remote Code Execution Vulnerability
A local file inclusion vulnerability in one of Trend Micro Apex Central's widgets could allow a remote attacker to execute arbitrary code on affected installations. Please note: this vulnerability must be used in conjunction with another one to exploit an affected system. In addition, an attacker must first obtain a valid set of credentials on target system in order to exploit this vulnerability.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex Central. Authentication is required to exploit this vulnerability. The specific flaw exists within the getObjWGFServiceApiByApiName function. The issue results from the lack of proper validation of user-supplied data prior to passing it to a PHP include function. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of IUSR.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52325?
CVE-2023-52325 has a high-severity rating due to its potential for remote code execution.
How do I fix CVE-2023-52325?
To fix CVE-2023-52325, it is recommended to apply the latest patches provided by Trend Micro for Apex Central.
Which versions of Trend Micro Apex Central are affected by CVE-2023-52325?
CVE-2023-52325 affects Trend Micro Apex Central version 2019 on Windows.
Can CVE-2023-52325 be exploited remotely?
Yes, CVE-2023-52325 can be exploited by a remote attacker but requires another vulnerability to be exploited in conjunction.
What are the potential impacts of CVE-2023-52325?
The potential impacts of CVE-2023-52325 include arbitrary code execution and system takeover on affected installations.