CVE-2023-41179
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2023-41179 is a newly disclosed vulnerability affecting Trend Micro's Apex One, Worry-Free Business Security, and Worry-Free Business Security Services. The issue lies in a 3rd party AV uninstaller module, which can be exploited by attackers to execute arbitrary commands. However, it's essential to note that an attacker must first gain administrative console access to the target system before they can exploit this vulnerability. This weakness poses a potential threat to organizations using these Trend Micro solutions, emphasizing the importance of securely managing administrative access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Trend Micro Apex One
- Trend Micro Worry-Free Business Security
- Trend Micro Worry-Free Business Security Services
Affected Vendors
- Trend Micro, Inc.