Vulnerability identifier: #VU55408
Vulnerability risk: Critical
Exploitation vector: Network
Exploit availability: No
Vendor: Trend Micro
The vulnerability allows a remote user to compromise vulnerable system.
The vulnerability exists due to insufficient validation of file during file upload within the product’s management console . A remote user can upload a malicious file and execute it on the server.
Note, the vulnerability is being actively exploited in the wild.
Install updates from vendor's website.
Vulnerable software versions
Apex One: 2019 - Patch 5 b9565
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.