Trend Micro Endpoint Encryption PolicyServer Deserialization Vulnerability Leading to Pre-Authentication Remote Code Execution

A vulnerability allowing pre-authentication remote code execution has been identified in Trend Micro Endpoint Encryption PolicyServer versions prior to 6.0.0.4013. This issue arises from an insecure deserialization operation that fails to properly validate user-supplied data, enabling remote attackers to execute arbitrary code on affected installations. The executed code runs in the context of the SYSTEM user.

Impact

Exploitation of this vulnerability allows remote attackers to execute arbitrary code on the affected system with SYSTEM privileges.

Remediation

Users are advised to update to Trend Micro Endpoint Encryption PolicyServer version 6.0.0.4013 or later. The update is available through the Trend Micro Download Center.