VULNERABILITY INTELLIGENCE
CVE-2024-36473
CVSS score5.3 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2024-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
Description
Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial of Service (DoS) and under specific conditions can lead to elevation of privileges.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-73
Primary references
- security@trendmicro.com — Vendor Advisory
- security@trendmicro.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory