Descripción
Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
Acción recomendada
Aplicar las mitigaciones del fabricante; si no están disponibles, discontinuar el uso del producto.
Referencias
- Aviso de success.trendmicro.com success.trendmicro.com/dcx/s/solution/000294994
- Ficha en NVD (NIST) nvd.nist.gov/vuln/detail/CVE-2023-41179
Otras vulnerabilidades de Trend Micro en el catálogo
- CVE-2026-34926 Vulnerabilidad de recorrido de directorios (path traversal) en Trend Micro Apex One (On-Premise) Alta 21-05-2026
- CVE-2025-54948 Vulnerabilidad de inyección de comandos del sistema operativo en Trend Micro Apex One Alta 18-08-2025
- CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability Alta 15-09-2022
- CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability Alta 31-03-2022
- CVE-2021-36742 Trend Micro Multiple Products Improper Input Validation Vulnerability Alta 03-11-2021