Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability.

Trend Micro · Apex One and Worry-Free Business Security

Exploitabilité (EPSS)

4.2 %

percentile mondial 91

Sévérité (CVSS)

non noté

Ajoutée au KEV

21 sept. 2023

échéance CISA · 12 oct. 2023

Description

Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

Action requise (CISA)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Signal de priorisation (d’inspiration SSVC)

Examiner

Exploitation
Active (catalogue KEV)

Automatisable
Inconnu

Impact technique
Inconnu

Une orientation, pas une décision : le 4ᵉ facteur SSVC (impact mission/société) dépend du contexte de votre organisation. Méthode ↗

Autres vulnérabilités exploitées · Trend Micro

CVE-2025-54948 25% CVE-2019-18187 25% CVE-2022-26871 19% CVE-2026-34926 13% CVE-2020-8599 12% CVE-2020-8467 11%

NVD ↗ CVE.org ↗ CISA KEV ↗