{
  "crds_version": "0.1",
  "kind": "base",
  "id": "crds:cve-2022-40139",
  "revision": 1,
  "title": "Trend Micro Apex One — Unverified Rollback Package",
  "summary": "Trend Micro Apex One clients do not properly validate rollback components, so someone with server admin console access can make clients download an unverified package, which could lead to RCE on those clients.",
  "source_type": "cve",
  "severity": "high",
  "cvss": {
    "score": 7.2,
    "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
    "version": "3.1"
  },
  "epss": 0.03439,
  "exploitation": {
    "known_exploited": true,
    "exploit_available": false,
    "attack_complexity": "low",
    "kev_added": "2022-09-15",
    "kev_due": "2022-10-06",
    "prerequisites": "Access to the Apex One server administration console."
  },
  "kill_chain": "execution",
  "recommended_action": "Apply Trend Micro solution 000291528 and review who holds Apex One administration console access.",
  "confidence": "high",
  "provenance": [
    {
      "fields": [
        "cvss",
        "exploitation.attack_complexity",
        "exploitation.exploit_available",
        "published_at",
        "references"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2022-40139",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "exploitation.known_exploited",
        "exploitation.kev_added",
        "exploitation.kev_due"
      ],
      "source": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "epss"
      ],
      "source": "https://api.first.org/data/v1/epss?cve=CVE-2022-40139",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "scrty-crds-pipeline/0.1"
    },
    {
      "fields": [
        "title",
        "subtitle",
        "summary",
        "severity",
        "remediation",
        "mitre_attack",
        "kill_chain",
        "recommended_action",
        "confidence",
        "tags",
        "exploitation.prerequisites"
      ],
      "source": "https://nvd.nist.gov/vuln/detail/CVE-2022-40139",
      "retrieved_at": "2026-11-05T08:18:20.755Z",
      "confidence": "high",
      "extractor": "claude-code"
    }
  ],
  "references": [
    {
      "type": "cve",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-40139",
      "label": "NVD record"
    },
    {
      "type": "cisa",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "label": "CISA Known Exploited Vulnerabilities catalog"
    },
    {
      "type": "vendor_advisory",
      "url": "https://success.trendmicro.com/solution/000291528"
    }
  ],
  "published_at": "2022-09-19T18:15:09.960Z",
  "issued_at": "2026-11-05T08:18:20.755Z",
  "tags": [
    "trend-micro",
    "apex-one",
    "improper-validation"
  ]
}