CVE-2024-53647

Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email verification requests without any restriction, potentially leading to abuse or denial of service.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://helpcenter.trendmicro.com/en-us/article/tmka-06710	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:trendmicro:id_security:*:*:*:*:*:*:*:*

OR	cpe:2.3:o:apple:iphone_os:-:::::::*
	cpe:2.3:o:google:android:-:::::::*

History

29 Sep 2025, 17:49

Type	Values Removed	Values Added
References	~~() https://helpcenter.trendmicro.com/en-us/article/tmka-06710 -~~	() https://helpcenter.trendmicro.com/en-us/article/tmka-06710 - Vendor Advisory
First Time		Google Apple iphone Os Trendmicro Trendmicro id Security Google android Apple
Summary		(es) Trend Micro ID Security, versión 3.0 y anteriores contiene una vulnerabilidad que podría permitir a un atacante enviar una cantidad ilimitada de solicitudes de verificación de correo electrónico sin ninguna restricción, lo que podría conducir a un abuso o denegación de servicio.
CPE		cpe:2.3:o:apple:iphone_os:-:::::::* cpe:2.3:a:trendmicro:id_security:::::::: cpe:2.3:o:google:android:-:::::::*

31 Dec 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-31 16:15

Updated : 2025-09-29 17:49

NVD link : CVE-2024-53647

Mitre link : CVE-2024-53647

CVE.ORG link : CVE-2024-53647

JSON object : View

Products Affected

apple

iphone_os

google

android

trendmicro

id_security

CWE

CWE-307

Improper Restriction of Excessive Authentication Attempts

CWE-400

Uncontrolled Resource Consumption

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2024-53647", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@trendmicro.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 2.5, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 3.9}]}, "published": "2024-12-31T16:15:26.437", "references": [{"url": "https://helpcenter.trendmicro.com/en-us/article/tmka-06710", "tags": ["Vendor Advisory"], "source": "security@trendmicro.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@trendmicro.com", "description": [{"lang": "en", "value": "CWE-307"}, {"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-770"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "Trend Micro ID Security, version 3.0 and below contains a vulnerability that could allow an attacker to send an unlimited number of email verification requests without any restriction, potentially leading to abuse or denial of service."}, {"lang": "es", "value": "Trend Micro ID Security, versi\u00f3n 3.0 y anteriores contiene una vulnerabilidad que podr\u00eda permitir a un atacante enviar una cantidad ilimitada de solicitudes de verificaci\u00f3n de correo electr\u00f3nico sin ninguna restricci\u00f3n, lo que podr\u00eda conducir a un abuso o denegaci\u00f3n de servicio."}], "lastModified": "2025-09-29T17:49:22.510", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trendmicro:id_security:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58265B59-EB17-4083-9A30-6ED418BE06B4", "versionEndIncluding": "3.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B5415705-33E5-46D5-8E4D-9EBADC8C5705"}, {"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@trendmicro.com"}