CVE-2024-52048

A

LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This vulnerability is similar to, but not identical to CVE-2024-52049. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*

History

25 Aug 2025, 18:27

Type Values Removed Values Added
Summary
  • (es) Un vínculo a LogServer que sigue una vulnerabilidad en Trend Micro Apex One podría permitir que un atacante local aumente los privilegios en las instalaciones afectadas. Esta vulnerabilidad es similar a CVE-2024-52049, pero no idéntica. Tenga en cuenta que un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder explotar esta vulnerabilidad.
CPE cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
References () https://success.trendmicro.com/en-US/solution/KA-0018217 - () https://success.trendmicro.com/en-US/solution/KA-0018217 - Vendor Advisory
First Time Trendmicro
Trendmicro apex One

31 Dec 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-31 16:15

Updated : 2025-08-25 18:27


NVD link : CVE-2024-52048

Mitre link : CVE-2024-52048

CVE.ORG link : CVE-2024-52048


JSON object : View

Products Affected
CWE
CWE-266

Incorrect Privilege Assignment