CVE-2023-32555: A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate...
0.0
CVSS
Description
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations.
Please note: a local attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
This is similar to, but not identical to CVE-2023-32554.
Classification
CVE ID: CVE-2023-32555
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Affected Products
Vendor: Trend Micro, Inc.
Product: Trend Micro Apex One
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 18.38% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://success.trendmicro.com/dcx/s/solution/000293108?language=en_UShttps://www.zerodayinitiative.com/advisories/ZDI-23-656/