Cybersecurity News in Asia

RECENT STORIES:

SEGA moves faster with flow-based network monitoring
Futurise Unveils 2024 Impact Report: Shaping Tomorrow’s Regulato...
Raythink Technology Showcases Next-Generation All-Round Security Syste...
Android trojan mimics human typing traits to evade behavioral detectio...
Embedding cybersecurity culture in financial institutions: lessons in ...
Upgrading biometric authentication system protects customers in the Ph...
LOGIN REGISTER
CybersecAsia
  • Features
    • Featured

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Embedding cybersecurity culture in financial institutions: lessons in leadership, collaboration, and cyber resilience

      Thursday, October 30, 2025, 11:37 AM Asia/Singapore | Features, Newsletter
    • Featured

      Biometrics and the digital identity crisis today

      Biometrics and the digital identity crisis today

      Tuesday, October 28, 2025, 3:30 PM Asia/Singapore | Features
    • Featured

      Collaboration and data security for today’s agentic workspace

      Collaboration and data security for today’s agentic workspace

      Wednesday, October 22, 2025, 1:42 PM Asia/Singapore | Features, Tips
  • Opinions
  • Tips
  • Whitepapers
  • Awards 2025
  • Directory
  • E-Learning

Select Page

News

Urgent mitigation urged for on-premises users of an endpoint security management console

By CybersecAsia editors | Thursday, August 7, 2025, 4:56 PM Asia/Singapore

Urgent mitigation urged for on-premises users of an endpoint security management console

Emergency mitigations are recommended following CVSS 9.4-level vulnerabilities exposing affected management console modules to severe RCE attacks.

Two critical security flaws, CVE-2025-54948 and CVE-2025-54987, both carrying a CVSS score of 9.4, have been publicly disclosed affecting the on-premises Apex One Management Console from Trend Micro.

These vulnerabilities, uncovered by security researcher Jacky Hsieh of CoreCloud Tech, are classified as command injection and remote code execution (RCE) flaws that can be exploited by pre-authenticated remote attackers.

Both flaws, which essentially stem from the same underlying issue but target different CPU architectures, allow attackers to upload malicious code and execute commands with elevated privileges on vulnerable installations.

Trend Micro confirmed it had observed at least one attempt to exploit the vulnerabilities in the wild, raising concerns about increased risk for organizations running unpatched systems. Notably:

  • The management console is typically accessed via TCP ports 8080 or 4343: the vulnerability arises from improper input validation, permitting attackers to execute system calls with the privileges of the web server account.
  • The affected products are Apex One (on-premises version) Management Server Version 14039 and below, as well as Apex One 2019 for the Windows platforms.
  • The cloud version of this software, in contrast, had received automatic backend mitigations deployed on 31 July 2025.
  • Although a formal patch is not expected until mid-August 2025, Trend Micro has released an emergency mitigation tool to protect on-premises customers in the interim.
  • Organizations applying this tool should be aware it disables the Remote Install Agent feature, forcing administrators to use alternative agent deployment methods for now.

Security experts strongly urge enterprises to apply the mitigation tool, restrict network access to the console, and avoid exposing its IP address to the public internet. A permanent patch will restore full console functionality when released later in August.

The discovery, marked by responsible disclosure, underscores how rapidly zero-day flaws are now being weaponized. As attempts to exploit the vulnerabilities have already been detected, experts advise urgent action to minimize enterprise exposure.

Share:

PreviousVIVOTEK’s VORTEX Cloud Solution Enhances Efficiency and Security for Sun Outdoors
NextExperts weigh in on Singapore’s response to UNC3886

Related Posts

Meeting escalating CX expectations with contextual full-stack observability

Meeting escalating CX expectations with contextual full-stack observability

Tuesday, December 7, 2021

Uncovering the 50 shades of ‘grey hat’ threats

Uncovering the 50 shades of ‘grey hat’ threats

Wednesday, September 2, 2020

Found and fixed: vulnerability in remote-working gateway Apache Guacamole

Found and fixed: vulnerability in remote-working gateway Apache Guacamole

Tuesday, July 14, 2020

Expert views for World Backup Day

Expert views for World Backup Day

Thursday, March 31, 2022

Leave a reply Cancel reply

You must be logged in to post a comment.

Voters-draw/RCA-Sponsors

Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
Slide
previous arrow
next arrow

CybersecAsia Voting Placement

Gamification listing or Participate Now

PARTICIPATE NOW

Vote Now -Placement(Google Ads)

Top-Sidebar-banner

Whitepapers

  • 2024 Insider Threat Report: Trends, Challenges, and Solutions

    2024 Insider Threat Report: Trends, Challenges, and Solutions

    Insider threats continue to be a major cybersecurity risk in 2024. Explore more insights on …Download Whitepaper
  • AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    AI-Powered Cyber Ops: Redefining Cloud Security for 2025

    The future of cybersecurity is a perfect storm: AI-driven attacks, cloud expansion, and the convergence …Download Whitepaper
  • Data Management in the Age of Cloud and AI

    Data Management in the Age of Cloud and AI

    In today’s Asia Pacific business environment, organizations are leaning on hybrid multi-cloud infrastructures and advanced …Download Whitepaper
  • Mitigating Ransomware Risks with GRC Automation

    Mitigating Ransomware Risks with GRC Automation

    In today’s landscape, ransomware attacks pose significant threats to organizations of all sizes, with increasing …Download Whitepaper

Middle-sidebar-banner

Case Studies

  • Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    Upgrading biometric authentication system protects customers in the Philippines: UnionDigital Bank

    An improved dual-liveness biometric framework can counter more deepfake threats, ensure compliance, and protect underbanked …Read more
  • HOSTWAY gains 73% operational efficiency for private cloud operations  

    HOSTWAY gains 73% operational efficiency for private cloud operations  

    With NetApp storage solutions, the Korean managed cloud service provider offers a lean, intelligent architecture, …Read more
  • CISOs can navigate emerging risks from autonomous AI with a new security framework

    CISOs can navigate emerging risks from autonomous AI with a new security framework

    See how security leaders can adopt layered strategies addressing intent, governance, and oversight to manage …Read more
  • MoneyMe strengthens fraud prevention and credit decisioning

    MoneyMe strengthens fraud prevention and credit decisioning

    Australian fintech strengthens risk management with SEON to scale lending operations securely and efficiently.Read more

Bottom sidebar

  • Our Brands
  • DigiconAsia
  • MartechAsia
  • Home
  • About Us
  • Contact Us
  • Sitemap
  • Privacy & Cookies
  • Terms of Use
  • Advertising & Reprint Policy
  • Media Kit
  • Subscribe
  • Manage Subscriptions
  • Newsletter

Copyright © 2025 CybersecAsia All Rights Reserved.