CVE Vulnerability Advisory Database

[Affected Scope] Trend Micro Apex One (On-Premise) server installations.

[Impact] A local attacker with administrative credentials can modify key tables via directory traversal to inject and deploy malicious code to connected agents.

[Mitigation] Apply the official security patches provided by Trend Micro immediately and restrict administrative access to the server.

[Affected Scope] Trend Micro Apex One (on-premise) management console

[Impact] A pre-authenticated remote attacker can upload malicious code and execute arbitrary commands with system privileges, leading to full server compromise

[Mitigation] Immediately apply the official security patch (KA-0020652) and restrict network access to the management console

[Affected Scope] Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security, and Worry-Free Business Security Services

[Impact] An attacker with administrative console access can manipulate the 3rd party AV uninstaller module to execute arbitrary commands with elevated privileges

[Mitigation] Immediately apply the official security patches provided by Trend Micro and restrict access to the administrative console

[Affected Scope] Trend Micro Apex One and Apex One as a Service client agents

[Impact] An attacker with administrative console access can force clients to execute unverified rollback packages, leading to Remote Code Execution (RCE) with SYSTEM privileges

[Mitigation] Apply the official Trend Micro security patches (CP 11136 / SP1 CP 11046 or higher) and restrict access to the admin console

[Affected Scope] Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1

[Impact] A local attacker with low-privileged access can exploit this vulnerability to escalate privileges to SYSTEM, leading to full host compromise

[Mitigation] Apply the official critical patches and security updates provided by Trend Micro immediately

[Affected Scope] Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1

[Impact] An authenticated attacker with management console access can exploit improper input validation to upload arbitrary files, potentially leading to Remote Code Execution (RCE)

[Mitigation] Apply the latest official security patches and service packs immediately, and restrict access to the management console

[Affected Scope] Trend Micro Apex One (2019) and OfficeScan XG servers.

[Impact] Unauthenticated remote attackers can write arbitrary data to arbitrary paths, bypassing ROOT login and achieving full system compromise.

[Mitigation] Immediately apply the official Trend Micro Critical Patches (CP) and restrict access to management ports.

[Affected Scope] Trend Micro Apex One (2019), OfficeScan XG, and Worry-Free Business Security (9.0, 9.5, 10.0) agents

[Impact] Authenticated attackers can bypass content validation to manipulate agent client components, potentially leading to arbitrary code execution

[Mitigation] Apply official critical patches and hotfixes immediately and enforce automatic agent updates via the management console

[Affected Scope] Trend Micro Apex One (2019) and OfficeScan XG server environments.

[Impact] An authenticated remote attacker can exploit the migration tool component to execute arbitrary code (RCE) with system privileges on the affected server.

[Mitigation] Immediately apply the official Critical Patch provided by Trend Micro and restrict access to migration-related ports.