Trend Micro Endpoint Encryption PolicyServer Deserialization Vulnerability Leading to Post-Authentication Remote Code Execution

A deserialization vulnerability has been identified in Trend Micro Endpoint Encryption PolicyServer versions prior to 6.0.0.4013. This vulnerability allows for post-authentication remote code execution on affected systems. To exploit this issue, an attacker must first gain the ability to execute low-privileged code on the target system.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system, with the executed code running in the context of the SYSTEM user.

Remediation

Users are advised to update to Trend Micro Endpoint Encryption PolicyServer Patch 1 Update 6 (Version 6.0.0.4013), now available. For additional guidance, consult the Trend Micro Business Success Portal article KA-0019928.