CVE-2024-36473

low-risk

Published 2024-06-10

Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial of Service (DoS) and under specific conditions can lead to elevation of privileges.

Do I need to act?

0.09% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.3/10 Medium

LOCAL / HIGH complexity

Affected Products (1)

Vpn Proxy One

Affected Vendors

Trendmicro

References (4)

Vendor Advisory https://helpcenter.trendmicro.com/en-us/article/tmka-07247

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-24-585/

Vendor Advisory https://helpcenter.trendmicro.com/en-us/article/tmka-07247

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-24-585/

/ 100

low-risk

Severity 14/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal