CVE-2022-26871

Опубликовано: 29 мар. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

Ссылки

https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
Vendor Advisory
https://jvn.jp/vu/JVNVU99107357
Third Party Advisory
VDB Entry
https://success.trendmicro.com/jp/solution/000290660
Mitigation
Patch
Vendor Advisory
https://success.trendmicro.com/solution/000290678
Mitigation
Patch
Vendor Advisory
https://www.jpcert.or.jp/english/at/2022/at220008.html
Third Party Advisory
VDB Entry
https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
Vendor Advisory
https://jvn.jp/vu/JVNVU99107357
Third Party Advisory
VDB Entry
https://success.trendmicro.com/jp/solution/000290660
Mitigation
Patch
Vendor Advisory
https://success.trendmicro.com/solution/000290678
Mitigation
Patch
Vendor Advisory
https://www.jpcert.or.jp/english/at/2022/at220008.html
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26871
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trendmicro:apex_central:2019:-:*:*:*:*:*:*

cpe:2.3:a:trendmicro:apex_one:-:*:*:*:*:saas:*:*

EPSS

Процентиль: 94%

0.13592

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-345

Связанные уязвимости

GHSA-j827-v44f-fw4p

CVSS3: 9.8

github

почти 4 года назад