9.4Critical
CVE-2025-54987
Description
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.
Weakness (CWE):
CWE-78
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Trend Micro, Inc. | Trend Micro Apex One | 2019 (14.0) – < 14.0.0.14039 | |
| trendmicro | apex one | 2019 | |
| trendmicro | apexone server | 14.0.0.14039 |
References and patches
- https://success.trendmicro.com/en-US/solution/KA-0020652 PatchVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:on-premises:windows:*:*