PT-2022-27283 · Trend Micro · Apex One As A Service+1

Published 2022-11-21 · Updated 2022-12-14 · CVE-2022-44654

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One and Apex One as a Service (affected versions not specified)

Description The issue concerns a monitor engine component in Trend Micro Apex One and Apex One as a Service that was compiled without the /SAFESEH memory protection mechanism. This mechanism is crucial for monitoring malicious payloads. The component's memory protection has been updated to enhance product security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2022-44654

Affected Products

Apex One As A Service

Trend Micro Apex One

References · 4

• https://success.trendmicro.com/solution/000291770 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-44654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44654 · Security Note
• https://t.me/cibsecurity/54300 · Telegram Post