CVE-2024-36473

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36473
Trend Micro VPN Proxy One Pro, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite or create attack but is limited to local Denial of Service (DoS) and under specific conditions can lead to elevation of privileges.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.0 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://helpcenter.trendmicro.com/en-us/article/tmka-07247 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-585/ Third Party Advisory
https://helpcenter.trendmicro.com/en-us/article/tmka-07247 Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-24-585/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:trendmicro:vpn_proxy_one:*:*:pro:*:*:*:*:*
History

30 Jul 2025, 18:40

Type Values Removed Values Added
CPE cpe:2.3:a:trendmicro:vpn_proxy_one:*:*:pro:*:*:*:*:*
References () https://helpcenter.trendmicro.com/en-us/article/tmka-07247 - () https://helpcenter.trendmicro.com/en-us/article/tmka-07247 - Vendor Advisory
References () https://www.zerodayinitiative.com/advisories/ZDI-24-585/ - () https://www.zerodayinitiative.com/advisories/ZDI-24-585/ - Third Party Advisory
First Time Trendmicro
Trendmicro vpn Proxy One

29 Mar 2025, 00:15

Type Values Removed Values Added
CWE CWE-73

21 Nov 2024, 09:22

Type Values Removed Values Added
References () https://helpcenter.trendmicro.com/en-us/article/tmka-07247 - () https://helpcenter.trendmicro.com/en-us/article/tmka-07247 -
References () https://www.zerodayinitiative.com/advisories/ZDI-24-585/ - () https://www.zerodayinitiative.com/advisories/ZDI-24-585/ -

11 Jun 2024, 13:54

Type Values Removed Values Added
Summary
  • (es) Trend Micro VPN Proxy One Pro, versión 5.8.1012 y anteriores es vulnerable a un ataque de creación o sobrescritura de archivos arbitrario, pero está limitado a la denegación de servicio (DoS) local y, en condiciones específicas, puede provocar una elevación de privilegios.

10 Jun 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-10 22:15

Updated : 2025-07-30 18:40

NVD link : CVE-2024-36473

Mitre link : CVE-2024-36473

CVE.ORG link : CVE-2024-36473

JSON object : View

Products Affected

trendmicro

  • vpn_proxy_one
CWE
CWE-73

External Control of File Name or Path