CVE-2023-52094

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 23, 2024
Updated: Jan 30, 2024
CWE ID 59

Summary

CVE-2023-52094 is a local privilege escalation vulnerability affecting the Trend Micro Apex One agent. An updater link following flaw enables an attacker with low-privileged access to the system to manipulate the updater process and delete an arbitrary folder. Successful exploitation of this vulnerability grants the attacker elevated privileges on the affected installation. It's essential to note that an attacker must initially gain the ability to execute code on the target system to leverage this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Trend Micro Apex One

Affected Vendors

  • Trend Micro, Inc.

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-52094 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions