ZDI-CAN-24933 MEDIUM 5.3 Overdue Sep 05, 2024

Trend Micro

Trend Micro is a well-known cybersecurity software vendor whose products include antivirus, endpoint protection, and cloud security solutions widely deployed in enterprise environments. This medium-severity vulnerability (CVSS 5.3) can be exploited remotely without authentication but requires user interaction and specific conditions to trigger, resulting in high confidentiality impact with no integrity or availability damage. Security teams should monitor for advisory ZDI-CAN-24933 closer to the January 3, 2025 deadline and prepare patches, as it could enable attackers to extract sensitive information from affected Trend Micro products through social engineering or targeted user interaction.

Advisory Details
Researcher Discovered by: Poh Jia Hao of STAR Labs SG Pte. Ltd.
Reported September 05, 2024
Deadline January 03, 2025 468d overdue
CVSS Vector AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy