CVE-2023-41179
Published on September 19, 2023
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
Known Exploited Vulnerability
This Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
The following remediation steps are recommended / required by October 12, 2023: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vulnerability Analysis
CVE-2023-41179 can be exploited with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 1.2 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.
Products Associated with CVE-2023-41179
You can be notified by stack.watch whenever vulnerabilities like CVE-2023-41179 are published in these products:
What versions are vulnerable to CVE-2023-41179?
Each of the following must match for the vulnerability to exist.