What is CVE-2023-28005?

CVE-2023-28005 is a medium-severity vulnerability in Microsoft Windows. CVSS score: 6.8/10. Published 2023-03-22.

How severe is CVE-2023-28005?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Microsoft Windows

CVE-2023-28005

A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affected device to bypass Microsoft Windows� Secure Boot process in an attempt to execu…

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microsoft Windows
Trendmicro Trend_micro_endpoint_encryption
Trend Micro, Inc. Micro Endpoint Encryption Full Disk — versions 6.0

References

security@trendmicro.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-28005?: CVE-2023-28005 is a medium-severity vulnerability in Microsoft Windows. CVSS score: 6.8/10. Published 2023-03-22.
How severe is CVE-2023-28005?: Medium severity. CVSS v3 base score is 6.8 out of 10.