CVE-2023-28005

CVE-2023-28005 is a medium-severity vulnerability affecting Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below, specifically when used with Microsoft Windows. An attacker with physical access can bypass the Windows Secure Boot process. While this bypass does not directly compromise the encrypted data, it could facilitate further attacks. The vulnerability has a CVSS score of 6.8, indicating a physical attack vector with low complexity and high impact on confidentiality, integrity, and availability if subsequent attacks are successful. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.