VYPR
← All advisories
High severity7.2CISA KEVNVD Advisory· Published Sep 19, 2023· Updated Jun 17, 2026

CVE-2023-41179

CVE-2023-41179

Description

A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.

Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10
  • Trend Micro/Apex One3 versions
    cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:-:*:*:*+ 2 more
    • cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:-:*:*:*
    • cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:saas:*:*:*
    • (no CPE)
  • Trend Micro/Worry Free Business Security2 versions
    cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*
    • (no CPE)
  • Trend Micro/Worry Free Business Security Services2 versions
    cpe:2.3:a:trendmicro:worry-free_business_security_services:-:*:*:*:saas:*:*:*+ 1 more
    • cpe:2.3:a:trendmicro:worry-free_business_security_services:-:*:*:*:saas:*:*:*
    • (no CPE)
  • Trend Micro, Inc./Trend Micro Apex Onev5
    Range: SaaS
  • Trend Micro, Inc./Trend Micro Worry-Free Business Securityv5
    Range: 10.0 SP1
  • Trend Micro, Inc./Trend Micro Worry-Free Business Security Servicesv5
    Range: SaaS

Patches

Vulnerability mechanics

References

4

News mentions

1