CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2023-411797.2/HIGHEPSS 4.2%CISA KEV
2023-09-19

Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability (CVE-2023-41179) Analysis and Mitigation Guide

[Affected Scope] Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security, and Worry-Free Business Security Services

[Impact] An attacker with administrative console access can manipulate the 3rd party AV uninstaller module to execute arbitrary commands with elevated privileges

[Mitigation] Immediately apply the official security patches provided by Trend Micro and restrict access to the administrative console

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse