CVE-2024-48904
Critical
Description
An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to exploit this vulnerability.
SeverityCritical
CVSS9.8
Exploit probability—
ProductTrendmicro Cloud Edge
PublishedOct 22, 2024
First seenOct 22, 2024
Weakness typeCWE-77Command injection
How to fix
Update
- trendmicro cloud_edge5.6.3228, 7.0.1081 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro cloud_edge | 5.6 ≤ v < 5.6.3228, 7.0 ≤ v < 7.0.1081 | 5.6.3228, 7.0.1081 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.