Critical · 9.8 CVE-2024-48904 EUVD-2024-43130GHSA-mh56-hmf5-hg22

An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances…

Published Oct 22, 2024 · Updated Oct 22, 2024 · Assigned by trendmicro

Description

An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.

Please note: authentication is not required in order to exploit this vulnerability.

Vendor	Product	Affected	Fixed
Trend Micro	Trend Micro Cloud Edge	5.6SP2, 7.0 – < 5.6.3228, 7.0.1081	5.6.3228, 7.0.1081