Trend Micro · Apex Central
CVE-2022-26871
Trend Micro Apex Central Arbitrary File Upload Vulnerability
مُستغلّة في هجمات
حرجة 9.8 احتمال الهجوم: 19%
ما هي
An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
CISA: An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.
ما العمل
Apply updates per vendor instructions.
الموعد النهائي للوكالات الفدرالية الأمريكية: 21 أبريل 2022
ثغرات مُستغلّة أخرى من Trend Micro
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 21/05/2026 | (On-Premise) Directory Traversal | Apex One | متوسطة 6.7 | 13% |
| 18/08/2025 | OS Command Injection | Apex One | حرجة 9.4 | 25% |
| 21/09/2023 | Remote Code Execution | Apex One and Worry-Free Business Security | مرتفع 7.2 | 4.2% |
| 15/09/2022 | Improper Validation | Apex One and Apex One as a Service | مرتفع 7.2 | 3.4% |
| 03/11/2021 | Remote Code Execution | Apex One and OfficeScan | مرتفع 8.8 | 11% |
| 03/11/2021 | Multiple Products Content Validation Escape | Apex One, OfficeScan and Worry-Free Business Security Agents | مرتفع 8.8 | 6.2% |
| 03/11/2021 | Authentication Bypass | Apex One and OfficeScan | حرجة 9.8 | 12% |
| 03/11/2021 | Directory Traversal | OfficeScan | مرتفع 8.8 | 25% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.