Trend Micro Deep Discovery Inspector Vulnerability Allows Remote Code Execution

CERT-FR Security Advisories

Published March 24th, 2026

Detected March 24th, 2026

Summary

CERT-FR has issued an advisory regarding a critical vulnerability in Trend Micro Deep Discovery Inspector. The vulnerability, identified as CVE-2025-15467, allows for remote code execution and denial of service. Affected versions require immediate patching.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has published an advisory (CERTFR-2026-AVI-0348) detailing a critical vulnerability (CVE-2025-15467) affecting Trend Micro Deep Discovery Inspector. This vulnerability enables remote attackers to achieve arbitrary code execution and cause a denial of service on affected systems. The advisory lists specific affected versions, ranging from 6.5 to 6.8 SP2, and directs users to Trend Micro's security bulletin for patch information.

Organizations utilizing Trend Micro Deep Discovery Inspector must immediately consult Trend Micro's security bulletin (KA-0022773) and apply the necessary patches to mitigate the risk of remote code execution and denial of service. Failure to do so could lead to significant security breaches, including unauthorized access and system disruption. This advisory highlights the importance of timely vulnerability management and patching for critical security infrastructure.

What to do next

Consult Trend Micro security bulletin KA-0022773 for patch details
Apply necessary patches to affected Trend Micro Deep Discovery Inspector versions
Review system logs for any signs of exploitation

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 24 mars 2026 N° CERTFR-2026-AVI-0348 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Vulnérabilité dans Trend Micro Deep Discovery Inspector

Gestion du document

Risques

Déni de service à distance
Exécution de code arbitraire à distance

Systèmes affectés

Deep Discovery Inspector versions 6.5 build x antérieures à 6.5 build 1197
Deep Discovery Inspector versions 6.6 build x antérieures à 6.6 build 1107
Deep Discovery Inspector versions 6.7 build x antérieures à 6.7 build 1116
Deep Discovery Inspector versions 6.7 SP1 build x antérieures à 6.7 SP1 build 1093
Deep Discovery Inspector versions 6.8 build x antérieures à 6.8 build 1139
Deep Discovery Inspector versions 6.8 SP1 build x antérieures à 6.8 SP1 build 1135
Deep Discovery Inspector versions 6.8 SP2 build x antérieures à 6.8 SP2 build 1053

Résumé

Une vulnérabilité a été découverte dans Trend Micro Deep Discovery Inspector. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance et un déni de service à distance.