CVE-2024-52049

A

LogServer link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. This vulnerability is similar to, but not identical to CVE-2024-52048. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*

History

25 Aug 2025, 18:27

Type Values Removed Values Added
First Time Trendmicro
Trendmicro apex One
References () https://success.trendmicro.com/en-US/solution/KA-0018217 - () https://success.trendmicro.com/en-US/solution/KA-0018217 - Vendor Advisory
CPE cpe:2.3:a:trendmicro:apex_one:*:*:*:*:on-premises:windows:*:*
cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*
Summary
  • (es) Un vínculo a LogServer que sigue una vulnerabilidad en Trend Micro Apex One podría permitir que un atacante local aumente los privilegios en las instalaciones afectadas. Esta vulnerabilidad es similar a CVE-2024-52048, pero no idéntica. Tenga en cuenta que un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder explotar esta vulnerabilidad.

31 Dec 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-12-31 16:15

Updated : 2025-08-25 18:27


NVD link : CVE-2024-52049

Mitre link : CVE-2024-52049

CVE.ORG link : CVE-2024-52049


JSON object : View

Products Affected
CWE
CWE-266

Incorrect Privilege Assignment