CVE-2023-52325

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 23, 2024
Updated: Jan 30, 2024

Summary

CVE-2023-52325 is a local file inclusion vulnerability affecting a widget in Trend Micro Apex Central. An attacker, who has previously obtained valid credentials on the targeted system, can exploit this flaw to include and execute arbitrary files, potentially leading to code execution. However, it's important to note that this vulnerability cannot be exploited alone; another exploit must be used in conjunction with it.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Trend Micro Apex Central

Affected Vendors

  • Trend Micro, Inc.