CVE-2023-52324

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

4.17%

Published

Jan 23, 2024

Modified

Dec 22, 2025

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any valid set of credentials. Also, this vulnerability could be potentially used in combination with another vulnerability to execute arbitrary code.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-434CWE-434

Affected Products (1)

trendmicro · apex_centralvulnerable

References (4)

https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-24-077/

Third Party AdvisoryVDB Entry

https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US

Vendor Advisory

https://www.zerodayinitiative.com/advisories/ZDI-24-077/

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs