CVE-2022-26871

CRITICALCISA KEV

9.8

Beschreibung

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht3/29/2022

Zuletzt geandert12/22/2025

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerTrend Micro

ProduktApex Central

SchwachstellennameTrend Micro Apex Central Arbitrary File Upload Vulnerability

KEV Aufnahmedatum2022-03-31

Behebungsfrist2022-04-21

Ransomware-NutzungUnknown

Betroffene Produkte

trendmicro:apex_centraltrendmicro:apex_one

Schwachen (CWE)

CWE-345CWE-345

Referenzen

https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435(security@trendmicro.com)

https://jvn.jp/vu/JVNVU99107357(security@trendmicro.com)

https://success.trendmicro.com/jp/solution/000290660(security@trendmicro.com)

https://success.trendmicro.com/solution/000290678(security@trendmicro.com)

https://www.jpcert.or.jp/english/at/2022/at220008.html(security@trendmicro.com)

https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435(af854a3a-2127-422b-91ae-364da2661108)

https://jvn.jp/vu/JVNVU99107357(af854a3a-2127-422b-91ae-364da2661108)

https://success.trendmicro.com/jp/solution/000290660(af854a3a-2127-422b-91ae-364da2661108)

https://success.trendmicro.com/solution/000290678(af854a3a-2127-422b-91ae-364da2661108)

https://www.jpcert.or.jp/english/at/2022/at220008.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26871(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.