All vulnerabilities
CVE-2023-41179

Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

Trend Micro Apex One and Worry-Free Business SecurityApplications & CMS
Open in ThreatlineRecord JSON
CVSS
7.2High
ExploitationExploited in the wildAdded to KEV 21 Sep 2023CISA KEV
Exploit odds (EPSS)4.25%Chance of exploitation activity in the next 30 days, higher than 91% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in14.0.0.12380Also 14.0.12637, 10.0 SP1 Build 2495 and 1 moreCVE List
Federal deadline12 Oct 2023Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

  • 14.0.0.12380Trend Micro Apex OneCVE List
  • 14.0.12637Trend Micro Apex OneCVE List
  • 10.0 SP1 Build 2495Trend Micro Worry-Free Business SecurityCVE List
  • 6.7.3578 / 14.3.1105Trend Micro Worry-Free Business Security ServicesCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Timeline

  1. 19 Sep 2023, 13:44 UTCPublishedCVE List
  2. 21 Sep 2023Added to CISA KEVCISA KEV

Description

Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

Text from CVE List

Affected versions 4

  • Trend Micro Apex Oneaffected: 2019 (14.0) before 14.0.0.12380CVE List
  • Trend Micro Apex Oneaffected: SaaS before 14.0.12637CVE List
  • Trend Micro Worry-Free Business Securityaffected: 10.0 SP1 before 10.0 SP1 Build 2495CVE List
  • Trend Micro Worry-Free Business Security Servicesaffected: SaaS before 6.7.3578 / 14.3.1105CVE List

References 6