CVE-2025-47867

{"id": "CVE-2025-47867", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@trendmicro.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-06-17T18:15:26.703", "references": [{"url": "https://success.trendmicro.com/en-US/solution/KA-0019355", "tags": ["Vendor Advisory"], "source": "security@trendmicro.com"}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-25-297/", "tags": ["Third Party Advisory"], "source": "security@trendmicro.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@trendmicro.com", "description": [{"lang": "en", "value": "CWE-74"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an attacker to include arbitrary files to execute as PHP code and lead to remote code execution on affected installations."}, {"lang": "es", "value": "Una vulnerabilidad de inclusi\u00f3n de archivos locales en un widget de Trend Micro Apex Central en versiones anteriores a 8.0.6955 podr\u00eda permitir que un atacante incluya archivos arbitrarios para ejecutarlos como c\u00f3digo PHP y provocar la ejecuci\u00f3n remota de c\u00f3digo en las instalaciones afectadas."}], "lastModified": "2025-09-08T21:04:50.527", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:-:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "664A5F5B-7494-4ADF-9028-CA5DC84AF91A"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_3752:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "316E50F7-A9DA-4B67-9ECC-C8D50116BA07"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_5158:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "8FBF6D0D-D68E-4DB2-B4DE-D4157FEE54F2"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6016:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "4B11EE47-757F-4A7D-806A-01C956535F4E"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6288:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "FB8D4938-783C-4954-95C0-BD26162330A6"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6394:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "8FFFED78-5927-4529-B74C-BF988108EC0C"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6481:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "D919B553-6CBD-4211-A507-CD930D485852"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6511:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "F30EC7A8-6E0D-40CE-9691-90F438F1F03B"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6571:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "F905E86D-E3D9-4E54-B2A6-01753043A9F4"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6658:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "231493F7-3804-4123-BE1E-ABC3AC46DAAF"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6660:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "983C3666-DF36-4C30-BD70-669734D28475"}, {"criteria": "cpe:2.3:a:trendmicro:apex_central:2019:build_6890:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "2EFB9449-DB07-4F75-AB53-23F2B721C0CE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@trendmicro.com"}