CVE-2023-52094

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 23, 2024
Updated: Jan 30, 2024
CWE ID 59

Summary

CVE-2023-52094 is a local privilege escalation vulnerability affecting the Trend Micro Apex One agent. An updater link following flaw enables an attacker with low-privileged access to the system to manipulate the updater process and delete an arbitrary folder. Successful exploitation of this vulnerability grants the attacker elevated privileges on the affected installation. It's essential to note that an attacker must initially gain the ability to execute code on the target system to leverage this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Trend Micro Apex One

Affected Vendors

  • Trend Micro, Inc.