Security features bypass in Trend Micro Endpoint Encryption Full Disk Encryption - CVE-2023-28005
Published: March 15, 2023
Vulnerability identifier: #VU73708
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-28005
CWE-ID: CWE-254
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an attacker to bypass Secure Boot restrictions.
the vulnerability exists due to incorrect implementation of the Secure Boot feature. An attacker with physical access to device can bypass the Secure Boot restrictions and gain unauthorized access to the system.
Affected software
Trend Micro Endpoint Encryption Full Disk Encryption
Microsoft Windows
Windows Server
Microsoft Windows
Windows Server
How to mitigate CVE-2023-28005
Install updates from vendor's website.
Trend Micro Endpoint Encryption Full Disk Encryption - update to 6.0.0.3323