Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-41179

A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

Published

2023-09-19T14:15:21.343

Last Modified

2024-11-29T14:33:04.283

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Primary
    CWE-94
  • Type: Secondary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application trendmicro apex_one 2019 Yes
Application trendmicro apex_one 2019 Yes
Application trendmicro worry-free_business_security 10.0 Yes
Application trendmicro worry-free_business_security_services - Yes
Operating System microsoft windows - No
References