CVE-2024-48904

An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to exploit this vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@trendmicro.com

Published

2024-10-22

Last modified

2024-10-22

Weaknesses

CWE-77

Affected products

• Trend Micro Cloud Edge (Trend Micro Inc.)
• Cloud Edge (Trendmicro)

References

• https://success.trendmicro.com/en-US/solution/KA-0017998
• https://www.zerodayinitiative.com/advisories/ZDI-24-1418/