VulnerabilityModified

CVE-2023-0587

A file upload vulnerability in exists in Trend Micro Apex One server build 11110.

CRITICAL 9.1EPSS 59.6%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 59.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

A file upload vulnerability in exists in Trend Micro Apex One server build 11110. Using a malformed Content-Length header in an HTTP PUT message sent to URL /officescan/console/html/cgi/fcgiOfcDDA.exe, an unauthenticated remote attacker can upload arbitrary files to the SampleSubmission directory (i.e., \PCCSRV\TEMP\SampleSubmission) on the server. The attacker can upload a large number of large files to fill up the file system on which the Apex One server is installed.

CVSS 3.1: 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
EPSS: 59.59% probability · 99th percentile
CISA KEV: Not listed
Weakness: CWE-434
Affected: trendmicro/apex one
Source: security@trendmicro.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.