cve-2024-48904
Vulnerability from cvelistv5
Published
2024-10-22 18:28
Modified
2024-10-22 19:00
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS score ?
3.24% (0.86023)
Summary
An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to exploit this vulnerability.
References
security@trendmicro.comhttps://success.trendmicro.com/en-US/solution/KA-0017998
security@trendmicro.comhttps://www.zerodayinitiative.com/advisories/ZDI-24-1418/
Impacted products
Vendor Product Version
Trend Micro, Inc. Trend Micro Cloud Edge Version: 5.6SP2, 7.0   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:trendmicro:cloud_edge:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "cloud_edge",
                  vendor: "trendmicro",
                  versions: [
                     {
                        lessThan: "5.6.3228",
                        status: "affected",
                        version: "5.6sp2",
                        versionType: "custom",
                     },
                     {
                        lessThan: "7.0.1081",
                        status: "affected",
                        version: "7.0",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2024-48904",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-10-22T18:54:54.135767Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-77",
                        description: "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-10-22T19:00:48.004Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "Trend Micro Cloud Edge",
               vendor: "Trend Micro, Inc.",
               versions: [
                  {
                     lessThan: "5.6.3228, 7.0.1081",
                     status: "affected",
                     version: "5.6SP2, 7.0",
                     versionType: "semver",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.\r\n\r\nPlease note: authentication is not required in order to exploit this vulnerability.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-10-22T18:28:59.027Z",
            orgId: "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
            shortName: "trendmicro",
         },
         references: [
            {
               url: "https://success.trendmicro.com/en-US/solution/KA-0017998",
            },
            {
               url: "https://www.zerodayinitiative.com/advisories/ZDI-24-1418/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
      assignerShortName: "trendmicro",
      cveId: "CVE-2024-48904",
      datePublished: "2024-10-22T18:28:59.027Z",
      dateReserved: "2024-10-09T19:03:26.733Z",
      dateUpdated: "2024-10-22T19:00:48.004Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2024-48904\",\"sourceIdentifier\":\"security@trendmicro.com\",\"published\":\"2024-10-22T19:15:06.763\",\"lastModified\":\"2024-10-23T15:12:34.673\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.\\r\\n\\r\\nPlease note: authentication is not required in order to exploit this vulnerability.\"},{\"lang\":\"es\",\"value\":\" Una vulnerabilidad de inyección de comandos en Trend Micro Cloud Edge podría permitir que un atacante remoto ejecute código arbitrario en los dispositivos afectados. Tenga en cuenta que no se requiere autenticación para explotar esta vulnerabilidad.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@trendmicro.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-77\"}]}],\"references\":[{\"url\":\"https://success.trendmicro.com/en-US/solution/KA-0017998\",\"source\":\"security@trendmicro.com\"},{\"url\":\"https://www.zerodayinitiative.com/advisories/ZDI-24-1418/\",\"source\":\"security@trendmicro.com\"}]}}",
      vulnrichment: {
         containers: "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-48904\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-10-22T18:54:54.135767Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:trendmicro:cloud_edge:*:*:*:*:*:*:*:*\"], \"vendor\": \"trendmicro\", \"product\": \"cloud_edge\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.6sp2\", \"lessThan\": \"5.6.3228\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"7.0\", \"lessThan\": \"7.0.1081\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-77\", \"description\": \"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-10-22T18:57:14.688Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Trend Micro, Inc.\", \"product\": \"Trend Micro Cloud Edge\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.6SP2, 7.0\", \"lessThan\": \"5.6.3228, 7.0.1081\", \"versionType\": \"semver\"}]}], \"references\": [{\"url\": \"https://success.trendmicro.com/en-US/solution/KA-0017998\"}, {\"url\": \"https://www.zerodayinitiative.com/advisories/ZDI-24-1418/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.\\r\\n\\r\\nPlease note: authentication is not required in order to exploit this vulnerability.\"}], \"providerMetadata\": {\"orgId\": \"7f7bd7df-cffe-4fdb-ab6d-859363b89272\", \"shortName\": \"trendmicro\", \"dateUpdated\": \"2024-10-22T18:28:59.027Z\"}}}",
         cveMetadata: "{\"cveId\": \"CVE-2024-48904\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-10-22T19:00:48.004Z\", \"dateReserved\": \"2024-10-09T19:03:26.733Z\", \"assignerOrgId\": \"7f7bd7df-cffe-4fdb-ab6d-859363b89272\", \"datePublished\": \"2024-10-22T18:28:59.027Z\", \"assignerShortName\": \"trendmicro\"}",
         dataType: "CVE_RECORD",
         dataVersion: "5.1",
      },
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.