9.4Kritisch
CVE-2025-54987
Beschreibung
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.
Schwachstellentyp (CWE):
CWE-78
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Trend Micro, Inc. | Trend Micro Apex One | 2019 (14.0) – < 14.0.0.14039 | |
| trendmicro | apex one | 2019 | |
| trendmicro | apexone server | 14.0.0.14039 |
Referenzen und Patches
- https://success.trendmicro.com/en-US/solution/KA-0020652 PatchVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:on-premises:windows:*:*