CVE-2023-41179
CVSS 3.1 Score 7.2 of 10 (high)
Details
Summary
CVE-2023-41179 is a newly disclosed vulnerability affecting Trend Micro's Apex One, Worry-Free Business Security, and Worry-Free Business Security Services. The issue lies in a 3rd party AV uninstaller module, which can be exploited by attackers to execute arbitrary commands. However, it's essential to note that an attacker must first gain administrative console access to the target system before they can exploit this vulnerability. This weakness poses a potential threat to organizations using these Trend Micro solutions, emphasizing the importance of securely managing administrative access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Trend Micro Apex One
- Trend Micro Worry-Free Business Security
- Trend Micro Worry-Free Business Security Services
Affected Vendors
- Trend Micro, Inc.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions