CVE-2023-41179

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Sep 19, 2023
Updated: Sep 22, 2023

Summary

CVE-2023-41179 is a newly disclosed vulnerability affecting Trend Micro's Apex One, Worry-Free Business Security, and Worry-Free Business Security Services. The issue lies in a 3rd party AV uninstaller module, which can be exploited by attackers to execute arbitrary commands. However, it's essential to note that an attacker must first gain administrative console access to the target system before they can exploit this vulnerability. This weakness poses a potential threat to organizations using these Trend Micro solutions, emphasizing the importance of securely managing administrative access.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Trend Micro Apex One
  • Trend Micro Worry-Free Business Security
  • Trend Micro Worry-Free Business Security Services

Affected Vendors

  • Trend Micro, Inc.