CVE-2022-26871

Description

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.

References

https://www.mandiant.com/resources/blog/zero-days-exploited-2022

https://www.tenable.com/cyber-exposure/tenable-2022-threat-landscape-report

https://success.trendmicro.com/dcx/s/solution/000290678?language=en_US&sfdcIFrameOrigin=null

https://www.jpcert.or.jp/english/at/2022/at220008.html

https://success.trendmicro.com/solution/000290678

https://success.trendmicro.com/jp/solution/000290660

https://jvn.jp/vu/JVNVU99107357

https://appweb.trendmicro.com/supportNews/NewsDetail.aspx?id=4435

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3