Summary
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
- Vendor
- Trend Micro
- Product
- Apex One and Worry-Free Business Security
- Added to KEV
- Sep 21, 2023
- Remediation due
- Oct 12, 2023 (US federal deadline)
- Ransomware use
- Not known
- EPSS
- 4.2% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References