Trend Micro Endpoint Encryption Full Disk Encryption up to 6.0.0.3204 Secure Boot access control

Summaryinfo

A vulnerability described as critical has been identified in Trend Micro Endpoint Encryption Full Disk Encryption up to 6.0.0.3204. Affected is an unknown function of the component Secure Boot. Such manipulation leads to access control. This vulnerability is listed as CVE-2023-28005. The attack can be executed directly on the physical device. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Trend Micro Endpoint Encryption Full Disk Encryption up to 6.0.0.3204. Affected by this issue is an unknown code block of the component Secure Boot. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. Impacted is confidentiality. CVE summarizes:

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows? Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the device. An attacker must first obtain physical access to the target system in order to exploit this vulnerability. It is also important to note that the contents of the drive(s) encrypted with TMEE FDE would still be protected and would NOT be accessible by the attacker by exploitation of this vulnerability alone.

The weakness was presented 03/22/2023. The advisory is shared for download at success.trendmicro.com. This vulnerability is handled as CVE-2023-28005 since 03/09/2023. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1068.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Trend Micro

Name

• Endpoint Encryption Full Disk Encryption

Version

• 6.0.0.3204

License

• commercial

Website

• Vendor: https://www.trendmicro.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion