Login Request a demo
High severity · published Jan 23, 2024
CVE-2023-52324
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations
8.8
CVSS
4.1%
EPSS
No
On KEV
Description
An unrestricted file upload vulnerability in Trend Micro Apex Central could allow a remote attacker to create arbitrary files on affected installations. Please note: although authentication is required to exploit this vulnerability, this vulnerability could be exploited when the attacker has any valid set of credentials. Also, this vulnerability could be potentially used in combination with another vulnerability to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.1% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Apex Central · Trendmicro
2019 · source: NVD
Affected product
AC
Apex Central
Trendmicro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-52324
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-52324
Vendor Advisory
https://success.trendmicro.com/dcx/s/solution/000296153?language=en_US
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-077/
More from Apex Central
9.8
CVE-2022-26871
Trend Micro Apex Central Arbitrary File Upload Vulnerability
9.8
CVE-2025-69258
A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled DLL into a key executable, leading to…
9.8
CVE-2025-49220
An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations
9.8
CVE-2025-49219
An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations
9.8
CVE-2025-47867
A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and…