ZDI-CAN-23401: ZDI-25-007: Trend Micro Apex One widget getWidgetPoolManager Local File Inclusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-52047.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23401?
ZDI-CAN-23401 has been assigned a CVSS rating of 7.5, indicating a high severity level.
What type of vulnerability is ZDI-CAN-23401?
ZDI-CAN-23401 is a remote code execution vulnerability that requires authentication to exploit.
Which software is affected by ZDI-CAN-23401?
ZDI-CAN-23401 affects Trend Micro Apex One and Worry-Free Business Security installations.
How do I fix ZDI-CAN-23401?
To fix ZDI-CAN-23401, ensure that your Trend Micro Apex One is updated to the latest version released by the vendor.
Can ZDI-CAN-23401 be exploited without authentication?
No, ZDI-CAN-23401 requires authentication for exploitation, which adds a layer of access control.