← Back

CVE-2023-41179

nvd nist
Published: Sep 19, 2023Modified: Oct 31, 2025CISA KEV

JSON object

Loading...
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

Affected (4)

3 products
Apex One
Worry Free Business Security
Configuration A
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Trendmicro
Version 2019
Version 2019
Version 10.0 sp1
All versions
Running on/withPlatform Versions
Microsoft
Windows
All versions

References (7)

Source: security@trendmicro.com
Third Party Advisory
Source: security@trendmicro.com
Broken Link
Source: security@trendmicro.com
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.