CVE-2023-41179: high-severity vulnerability in Trend Micro Apex One
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
A vulnerability in Trend Micro antivirus uninstaller allows attackers with admin console access to run arbitrary commands on the system. This is critical because it gives attackers complete control over protected computers.
CWE-94 (Improper Control of Generation of Code) in the AV uninstaller module permits arbitrary code execution through manipulation of the uninstaller functionality. Exploitation requires prior administrative console access to the target system; successful exploitation results in complete command execution privileges on the affected Trend Micro Apex One or Worry-Free Business Security installations.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.