Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-40139

Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.

Published

2022-09-19T18:15:09.960

Last Modified

2025-02-12T20:44:10.163

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application trendmicro apex_one - Yes
Application trendmicro apex_one 2019 Yes
Operating System microsoft windows - No
References