CVE-2023-28005: trend micro, inc. trend micro endpoint encryption full disk encryption
Vulnerability summary
CVE-2023-28005 is a medium (CVSS 6.8) vulnerability in trend micro, inc. trend micro endpoint encryption full disk encryption. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 8.8% of scored vulnerabilities.
Timeline
- 14-03-2023PublishedVulnerability first disclosed.
- 05-05-2025Last modifiedVulnerability information updated.
Description
A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execute other attacks to obtain access to the contents of the device. An attacker must first obtain physical access to the target system in order to exploit this vulnerability. It is also important to note that the contents of the drive(s) encrypted with TMEE FDE would still be protected and would NOT be accessible by the attacker by exploitation of this vulnerability alone.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.8MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
0.00 pp
From 0.20% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Trend micro, inc.1 product
- trend micro endpoint encryption full disk encryption≥ 6.0, < 6.0.0.3323
Trendmicro1 product
- trend_micro_endpoint_encryption≤ 6.0.0.3204
2 vendors · 2 products
References
1 links- success.trendmicro.com/solution/000292473Vendor Advisory