Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that could allow unauthorized access to product configurations and functions.
CVE ID: CVE-2024-45334
CVSS Base Severity: HIGH
CVSS Base Score: 7.8
CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Vendor: Trend Micro, Inc.
Product: Trend Micro Antivirus One
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 13.31% (scored less or equal to compared to others)
EPSS Date: 2025-04-11 (when was this score calculated)
SSVC Exploitation: none
SSVC Technical Impact: total
SSVC Automatable: false