2025-0609-tm-a1-001
HIGH CVSS 8.7 csaf_trend
Description
SECURITY BULLETIN: June 2025 for Trend Micro Apex One
Timeline
- Published
- 2025-06-09 10:00 UTC
- Last Modified
- 2025-06-09
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"document": {
"category": "csaf_vex",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "SECURITY BULLETIN: June 2025 for Trend Micro Apex One",
"title": "Title"
}
],
"publisher": {
"category": "vendor",
"contact_details": "security@trendmicro.com",
"issuing_authority": "Trend Micro PSIRT",
"name": "Trend Micro",
"namespace": "https://www.trendmicro.com/vulnerability"
},
"references": [
{
"category": "self",
"summary": "Trend Micro Security Bulletin",
"url": "https://success.trendmicro.com/en-US/solution/KA-0019917"
}
],
"title": "SECURITY BULLETIN: June 2025 for Trend Micro Apex One",
"tracking": {
"current_release_date": "2025-06-09T10:00:00.000Z",
"generator": {
"date": "2025-07-23T18:31:24.504Z",
"engine": {
"name": "Secvisogram",
"version": "2.5.31"
}
},
"id": "2025-0609-TM-A1-001",
"initial_release_date": "2025-06-09T10:00:00.000Z",
"revision_history": [
{
"date": "2025-06-09T10:00:00.000Z",
"number": "1",
"summary": "Initial version."
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "2019",
"product": {
"name": "Apex One",
"product_id": "TM-A1-001"
}
}
],
"category": "product_name",
"name": "Apex One"
},
{
"branches": [
{
"category": "product_version",
"name": "SaaS",
"product": {
"name": "Apex One as a Service",
"product_id": "TM-A1SAAS-001"
}
}
],
"category": "product_name",
"name": "Apex One as a Service"
}
],
"category": "vendor",
"name": "Trend Micro"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Alexander Pudwill"
],
"summary": "Trend Micro would like to thank the following individuals for responsibly reporting these issues: Alexander Pudwill"
}
],
"cve": "CVE-2025-49154",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "description",
"text": "An insecure access control vulnerability in Trend Micro Apex One could allow a local attacker to overwrite key memory-mapped files which could then have severe consequences for the security and stability of affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"TM-A1SAAS-001"
],
"known_affected": [
"TM-A1-001"
]
},
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-09T19:00:00.000Z",
"details": "SP1 CP Build 14002",
"product_ids": [
"TM-A1-001"
],
"url": "http://downloadcenter.trendmicro.com/"
},
{
"category": "vendor_fix",
"date": "2025-06-01T19:00:00.000Z",
"details": "Security Agent Version 14.0.14492",
"product_ids": [
"TM-A1SAAS-001"
],
"url": "https://success.trendmicro.com/en-US/solution/KA-0019917"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"environmentalScore": 8.7,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"temporalScore": 8.7,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"TM-A1-001",
"TM-A1SAAS-001"
]
}
],
"title": "Insecure Access Control"
},
{
"acknowledgments": [
{
"names": [
"Xavier DANEST - Decathlon working with Trend Zero Day Initiative"
],
"summary": "Trend Micro would like to thank the following individuals for responsibly reporting these issues: Alexander Pudwill"
}
],
"cve": "CVE-2025-49155",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"notes": [
{
"category": "description",
"text": "An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"TM-A1SAAS-001"
],
"known_affected": [
"TM-A1-001"
]
},
"references": [
{
"category": "external",
"summary": "ZDI-CAN-24571",
"url": "https://www.zerodayinitiative.com/advisories/published/"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-09T19:00:00.000Z",
"details": "SP1 CP Build 14002",
"product_ids": [
"TM-A1-001"
],
"url": "http://downloadcenter.trendmicro.com/"
},
{
"category": "vendor_fix",
"date": "2025-06-01T19:00:00.000Z",
"details": "Security Agent Version 14.0.14492",
"product_ids": [
"TM-A1SAAS-001"
],
"url": "https://success.trendmicro.com/en-US/solution/KA-0019917"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 8.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"temporalScore": 8.8,
"temporalSeverity": "HIGH",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"TM-A1-001",
"TM-A1SAAS-001"
]
}
],
"title": "Data Loss Prevention Uncontrolled Search Path RCE Vulnerability"
},
{
"acknowledgments": [
{
"names": [
"Anonymous working with Trend Zero Day Initiative"
],
"summary": "Trend Micro would like to thank the following individuals for responsibly reporting these issues: Alexander Pudwill"
}
],
"cve": "CVE-2025-49156",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "description",
"text": "A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"TM-A1SAAS-001"
],
"known_affected": [
"TM-A1-001"
]
},
"references": [
{
"category": "external",
"summary": "ZDI-CAN-24973",
"url": "https://www.zerodayinitiative.com/advisories/published/"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-09T19:00:00.000Z",
"details": "SP1 CP Build 14002",
"product_ids": [
"TM-A1-001"
],
"url": "http://downloadcenter.trendmicro.com/"
},
{
"category": "vendor_fix",
"date": "2025-06-01T19:00:00.000Z",
"details": "Security Agent Version 14.0.14492",
"product_ids": [
"TM-A1SAAS-001"
],
"url": "https://success.trendmicro.com/en-US/solution/KA-0019917"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"TM-A1-001",
"TM-A1SAAS-001"
]
}
],
"title": "Scan Engine Link Following Local Privilege Escalation"
},
{
"acknowledgments": [
{
"names": [
"Anonymous working with Trend Zero Day Initiative"
],
"summary": "Trend Micro would like to thank the following individuals for responsibly reporting these issues: Alexander Pudwill"
}
],
"cve": "CVE-2025-49157",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"notes": [
{
"category": "description",
"text": "A link following vulnerability in the Trend Micro Apex One Damage Cleanup Engine could allow a local attacker to escalation privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"TM-A1SAAS-001"
],
"known_affected": [
"TM-A1-001"
]
},
"references": [
{
"category": "external",
"summary": "ZDI-CAN-25273",
"url": "https://www.zerodayinitiative.com/advisories/published/"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-09T19:00:00.000Z",
"details": "SP1 CP Build 14002",
"product_ids": [
"TM-A1-001"
],
"url": "http://downloadcenter.trendmicro.com/"
},
{
"category": "vendor_fix",
"date": "2025-06-01T19:00:00.000Z",
"details": "Security Agent Version 14.0.14492",
"product_ids": [
"TM-A1SAAS-001"
],
"url": "https://success.trendmicro.com/en-US/solution/KA-0019917"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"environmentalScore": 7.8,
"environmentalSeverity": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 7.8,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"TM-A1-001",
"TM-A1SAAS-001"
]
}
],
"title": "Damage Cleanup Engine Link Following Local Privilege Escalation"
},
{
"acknowledgments": [
{
"names": [
"Vladislav Berghici of Trend Micro Research working with Trend Zero Day Initiative"
],
"summary": "Trend Micro would like to thank the following individuals for responsibly reporting these issues: Alexander Pudwill"
}
],
"cve": "CVE-2025-49158",
"cwe": {
"id": "CWE-427",
"name": "Uncontrolled Search Path Element"
},
"notes": [
{
"category": "description",
"text": "An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"fixed": [
"TM-A1SAAS-001"
],
"known_affected": [
"TM-A1-001"
]
},
"references": [
{
"category": "external",
"summary": "ZDI-CAN-25771",
"url": "https://www.zerodayinitiative.com/advisories/published/"
}
],
"remediations": [
{
"category": "vendor_fix",
"date": "2025-06-09T19:00:00.000Z",
"details": "SP1 CP Build 14002",
"product_ids": [
"TM-A1-001"
],
"url": "http://downloadcenter.trendmicro.com/"
},
{
"category": "vendor_fix",
"date": "2025-06-01T19:00:00.000Z",
"details": "Security Agent Version 14.0.14492",
"product_ids": [
"TM-A1SAAS-001"
],
"url": "https://success.trendmicro.com/en-US/solution/KA-0019917"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"environmentalScore": 6.7,
"environmentalSeverity": "MEDIUM",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"temporalScore": 6.7,
"temporalSeverity": "MEDIUM",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"TM-A1-001",
"TM-A1SAAS-001"
]
}
],
"title": "Security Agent Uncontrolled Search Path Local Privilege Escalation"
}
]
}