CVE-2022-33158

7.8 highEPSS 0.3%

High (7.8) in trendmicro vpn proxy one pro. EPSS 0.3% chance of exploitation in the next 30 days.

Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-552
Published: 2022-07-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

trendmicro:vpn_proxy_one_pro

References

https://helpcenter.trendmicro.com/en-us/article/tmka-11042
https://www.zerodayinitiative.com/advisories/ZDI-22-853/
https://helpcenter.trendmicro.com/en-us/article/tmka-11042
https://www.zerodayinitiative.com/advisories/ZDI-22-853/

Check your stack JSON