Trend Micro Product Security Update Advisory (CVE-2024-48904)
Overview
An update has been released to address vulnerabilities in Trend Micro Products. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-48904
- Cloud Edge version: 5.6SP2
- Cloud Edge version: 7.0
Resolved Vulnerabilities
Vulnerability that allows remote attackers to execute arbitrary code in affected installations of Trend Micro Cloud Edge (CVE-2024-48904)
Vulnerability Patches
Vulnerability Patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-48904
- Cloud Edge version: 5.6SP2 build 3228
- Cloud Edge version: 7.0 build 1081
Referenced Sites
[1] CVE-2024-48904 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-48904
[2] Trend Micro Cloud Edge REST API Command Injection Remote Code Execution Vulnerability
https://www.zerodayinitiative.com/advisories/ZDI-24-1418/
[3] SECURITY BULLETIN: Trend Micro Cloud Edge Command Injection RCE Vulnerability