{"uuid": "46c5bdf4-d699-4df6-896c-2470e007c697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41179", "type": "seen", "source": "https://t.me/hacking_Attack/119399", "content": "Black Hat Ethical Hacking\nTrend Micro Addresses Actively Exploited Remote Code Execution Flaw\n\nTrend Micro Addresses Actively Exploited Remote Code Execution Flaw\nPost Views: 2 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nTrend Micro has successfully patched a zero-day vulnerability that allowed remote code execution in its Apex One endpoint protection solution. This vulnerability was actively exploited in attacks.\n\nApex One is an endpoint security solution designed to serve businesses of all sizes. It also includes the \u2018Worry-Free Business Security\u2019 suite, tailored for small to medium-sized companies.\n\nThe vulnerability, identified as CVE-2023-41179, was assigned a high severity rating of 9.1 according to CVSS v3, classifying it as \u201ccritical.\u201d\n\nThe flaw was found in a third-party uninstaller module that comes bundled with the security software.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nTrend Micro\u2019s security bulletin stated, \u201cTrend Micro has observed at least one active attempt of potential attacks against this vulnerability in the wild. Customers are strongly encouraged to update to the latest versions as soon as possible.\u201d\n\nThe following products are affected by this vulnerability:\n\n* Trend Micro Apex One 2019\n* Trend Micro Apex One SaaS 2019\n* Worry-Free Business Security (WFBS) 10.0 SP1 (marketed as Virus Buster Business Security (Biz) in Japan)\n* Worry-Free Business Security Services (WFBSS) 10.0 SP1 (marketed as Virus Buster Business Security Services (VBBSS) in Japan)\n\nTrend Micro has released fixes in the following versions:\n\n* Apex One 2019 Service Pack 1 \u2013 Patch 1 (Build 12380)\n* Apex One SaaS 14.0.12637\n* WFBS Patch 2495\n* WFBSS July 31 update\n\nIt\u2019s important to note that exploiting CVE-2023-41179 requires the attacker to have previously stolen the product\u2019s management console credentials and used them to log in.\n\nTrend Micro explained, \u201cExploiting these types of vulnerabilities generally require that an attacker has access (physical or remote) to a vulnerable machine.\u201d\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Offensive Security Tool: Headerpwn\nThe Japanese Computer Emergency Response Team (CERT) has also issued an alert regarding the active exploitation of this vulnerability. They have urged users of the affected software to upgrade to a secure release as soon as possible.\n\nJPCERT stated, \u201cIf the vulnerability is exploited, an attacker who can log in to the product\u2019s administration console may execute arbitrary code with system privilege on the PC where the security agent is installed.\u201d\n\nAs a temporary measure, organizations can limit access to the product\u2019s administration console to trusted networks, preventing unauthorized access from external and arbitrary locations.\n\nHowever, the ultimate solution is for administrators to install the security updates to prevent threat actors who have already infiltrated a network from leveraging the vulnerability to move laterally to other devices.\nTrending: New Phishing Campaign Exploits Microsoft Teams to Deliver DarkGate Loader Malware Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp[...]", "creation_timestamp": "2026-09-01T20:00:47.484841Z"}