PT-2024-4340 · Trend Micro · Trend Micro Vpn Proxy One Pro

Hashim Jawad + 1 · Published 2024-06-10 · Updated 2025-07-30 · CVE-2024-36473

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Trend Micro VPN Proxy One Pro versions 5.8.1012 and below

Description The issue is related to an arbitrary file overwrite or create attack, which can lead to a local Denial of Service (DoS) and, under specific conditions, elevation of privileges. It is also associated with the possibility of deleting arbitrary files in the system, potentially allowing an attacker to gain elevated privileges.

Recommendations For versions 5.8.1012 and below, update to a version above 5.8.1012 to resolve the issue. At the moment, there is no information about additional mitigation measures for this specific vulnerability.

Fix

DoS

LPE

Link Following

Weakness Enumeration

CWE-73

CWE-59

Related Identifiers

BDU:2024-04829

CVE-2024-36473

ZDI-24-585

Affected Products

Trend Micro Vpn Proxy One Pro

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-36473 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-24-585 · Security Note
• https://helpcenter.trendmicro.com/en-us/article/tmka-07247 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-36473 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04829 · Security Note
• https://twitter.com/CVEnew/status/1800290529017774331 · Twitter Post
• https://t.me/cveNotify/130308 · Telegram Post