Paper/Archive/CVE-2023-32521

CVE-2023-32521

Trend Micro, Inc. Trend Micro Moibile Security for Enterprise — A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticate…

EPSS 67%public exploit CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 99.3.993 × 2019.9 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files.

Affected

ProductAffectedFixed inSource

Trend Micro Moibile Security for Enterprise9.8 SP5 – < 9.8.32949.8.3294CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refsuccess.trendmicro.com/dcx/s/solution/000293106?language=en_US reftenable.com/security/research/tra-2023-17