Firetruck

CVE-2022-40139

KEV

Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

View CVE record →
Vendor / Project
Trend Micro
Product
Apex One and Apex One as a Service
Date added
Sep 15, 2022
Due date
Oct 6, 2022
Known ransomware use
Unknown
CWEs
CWE-353, CWE-641

Description

Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.

Required action

Apply updates per vendor instructions.

Notes