CVE-2022-40139highunder attack

CVE-2022-40139: high-severity vulnerability in Trend Micro Apex One

Published · Updated

Follow this CVE+ Monitor Trend Micro Apex One+ Monitor Trend Micro Apex One as a Service

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 7.2epss 3.4%
from disclosure to weapon
Published on NVDSep 19
CISA KEVSep 15
Action required by CISAfederal deadline: 2022-10-06

Apply updates per vendor instructions.

In short

Trend Micro Apex One's rollback feature doesn't properly verify downloaded packages, allowing a server administrator with compromised credentials to trick client computers into installing malicious software that could take over the system.

Technical detail

The rollback mechanism in Apex One clients lacks proper validation of package integrity and authenticity, allowing an authenticated server administrator to deliver unsigned or modified packages via the admin console. This can result in remote code execution on affected client endpoints without user interaction.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and Trend Micro Apex One as a Service clients could allow a Apex One server administrator to instruct affected clients to download an unverified rollback package, which could lead to remote code execution. Please note: an attacker must first obtain Apex One server administration console access in order to exploit this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Trend Micro · Trend Micro Apex One
Related CVEs — Trend Micro Apex One

In the same product, most dangerous first.

CVE-2021-36741HIGHCVE-2021-36741EPSS 5.0%KEVCVE-2020-24557HIGHCVE-2020-24557EPSS 2.7%KEVCVE-2021-36742HIGHCVE-2021-36742EPSS 1.5%KEVCVE-2019-18188—CVE-2019-18188EPSS 4.7%CVE-2021-32465—CVE-2021-32465EPSS 4.3%CVE-2020-28582—CVE-2020-28582EPSS 3.2%