CVE-2023-32527

Name of the Vulnerable Software and Affected Versions Trend Micro Mobile Security (Enterprise) version 9.8 SP5

Description The issue allows a remote attacker to execute arbitrary code on affected installations. To exploit this, an attacker must first obtain the ability to execute low-privileged code on the target system. This vulnerability is related to a Local File Inclusion Remote Code Execution issue, potentially involving the getWidgetPoolManager widget.

Recommendations For Trend Micro Mobile Security (Enterprise) version 9.8 SP5, consider restricting access to the getWidgetPoolManager widget as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.