CVE-2024-48904

CRITICAL 9.8CVE-2024-48904 · Published 22/10/2024 · updated 17/06/2026

In short

CVE-2024-48904 is a CRITICAL (CVSS 9.8) vulnerability affecting cloud edge (trendmicro).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.
Fix: update to 5.6.3228, 7.0.1081 or later.

Package	Affected versions	Patched versions
cloud edge trendmicro	`≥ 5.6, < 5.6.3228≥ 7.0, < 7.0.1081`	`5.6.32287.0.1081`

Description

An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to exploit this vulnerability.

References

success.trendmicro.com/en-US/solution/KA-0017998 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-24-1418 · Third Party Advisory

More vulnerabilities in cloud edge

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free