critical9.8Known exploited
CVE-2022-26871
Trend Micro Apex Central Arbitrary File Upload Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-31. Federal due date: 2022-04-21.
Apply updates per vendor instructions.
Impact
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Trendmicro | Apex Central | Version 2019 |
| Trendmicro | Apex One | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
- https://jvn.jp/vu/JVNVU99107357
- https://success.trendmicro.com/jp/solution/000290660
- https://success.trendmicro.com/solution/000290678
- https://www.jpcert.or.jp/english/at/2022/at220008.html
- https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435
- https://jvn.jp/vu/JVNVU99107357
- https://success.trendmicro.com/jp/solution/000290660
- https://success.trendmicro.com/solution/000290678
- https://www.jpcert.or.jp/english/at/2022/at220008.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26871