CVE-2025-54987: OS Command Injection
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is essentially the same as CVE-2025-54948 but targets a different CPU architecture.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54987?
CVE-2025-54987 has a high severity rating due to its potential for remote code execution without authentication.
How do I fix CVE-2025-54987?
To mitigate CVE-2025-54987, update your Trend Micro Apex One to the latest version as per vendor recommendations.
Who is affected by CVE-2025-54987?
Organizations using Trend Micro Apex One management console on affected CPU architectures are at risk from CVE-2025-54987.
What types of attacks can CVE-2025-54987 facilitate?
CVE-2025-54987 can allow attackers to upload malicious code and execute arbitrary commands on the compromised system.
Is CVE-2025-54987 related to other vulnerabilities?
Yes, CVE-2025-54987 is related to CVE-2025-54948, but it targets a different CPU architecture.