TREND MICRO FIXES CRITICAL VULNERABILITIES IN MULTIPLE PRODUCTS

Summary from the TLDR InfoSec newsletter

Trend Micro has released security updates to fix multiple critical-severity remote code execution (RCE) and authentication bypass vulnerabilities in its Apex Central and Endpoint Encryption (TMEE) PolicyServer products. Trend Micro Endpoint Encryption PolicyServer is a central management server for TMEE, providing full disk and removable media encryption for Windows endpoints. The vulnerabilities include three pre-auth RCEs that stem from insecure deserializations and an auth bypass due to a broken auth implementation.