cve-2023-47194
Vulnerability from cvelistv5
Published
2024-01-23 20:37
Modified
2024-08-02 21:01
Severity ?
Summary
An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47195.
References
security@trendmicro.comhttps://success.trendmicro.com/dcx/s/solution/000295652?language=en_USVendor Advisory
security@trendmicro.comhttps://www.zerodayinitiative.com/advisories/ZDI-23-1614/Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://success.trendmicro.com/dcx/s/solution/000295652?language=en_USVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.zerodayinitiative.com/advisories/ZDI-23-1614/Third Party Advisory, VDB Entry
Impacted products
Vendor Product Version
Trend Micro, Inc. Trend Micro Apex One Version: 2019 (14.0)   ≤
Create a notification for this product.
   Trend Micro, Inc. Trend Micro Apex One as a Service Version: SaaS   ≤
Create a notification for this product.
Show details on NVD website

To clipboard 

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T21:01:22.868Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.zerodayinitiative.com/advisories/ZDI-23-1614/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Trend Micro Apex One",
               vendor: "Trend Micro, Inc.",
               versions: [
                  {
                     lessThan: "14.0.0.12526",
                     status: "affected",
                     version: "2019 (14.0)",
                     versionType: "semver",
                  },
               ],
            },
            {
               product: "Trend Micro Apex One as a Service",
               vendor: "Trend Micro, Inc.",
               versions: [
                  {
                     lessThan: "14.0.12737",
                     status: "affected",
                     version: "SaaS\t",
                     versionType: "semver",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\r\n\r\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\r\n\r\nThis vulnerability is similar to, but not identical to, CVE-2023-47195.",
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-01-23T20:37:06.848Z",
            orgId: "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
            shortName: "trendmicro",
         },
         references: [
            {
               url: "https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US",
            },
            {
               url: "https://www.zerodayinitiative.com/advisories/ZDI-23-1614/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "7f7bd7df-cffe-4fdb-ab6d-859363b89272",
      assignerShortName: "trendmicro",
      cveId: "CVE-2023-47194",
      datePublished: "2024-01-23T20:37:06.848Z",
      dateReserved: "2023-10-31T19:20:53.843Z",
      dateUpdated: "2024-08-02T21:01:22.868Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
   "vulnerability-lookup:meta": {
      nvd: "{\"cve\":{\"id\":\"CVE-2023-47194\",\"sourceIdentifier\":\"security@trendmicro.com\",\"published\":\"2024-01-23T21:15:08.607\",\"lastModified\":\"2024-11-21T08:29:56.013\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\\r\\n\\r\\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\\r\\n\\r\\nThis vulnerability is similar to, but not identical to, CVE-2023-47195.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de validación de origen en el agente de seguridad Trend Micro Apex One podría permitir a un atacante local escalar privilegios en las instalaciones afectadas. Tenga en cuenta: un atacante primero debe obtener la capacidad de ejecutar código con pocos privilegios en el sistema de destino para poder explotar esta vulnerabilidad. Esta vulnerabilidad es similar, pero no idéntica, a CVE-2023-47195.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-346\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trendmicro:apex_one:*:*:*:*:saas:windows:*:*\",\"versionEndExcluding\":\"14.0.12737\",\"matchCriteriaId\":\"5D414F00-6C14-47B3-9858-3AE458F9289D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:on-premises:windows:*:*\",\"matchCriteriaId\":\"84F26044-A0BB-442E-93BD-E836B4DD71F4\"}]}]}],\"references\":[{\"url\":\"https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\",\"source\":\"security@trendmicro.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.zerodayinitiative.com/advisories/ZDI-23-1614/\",\"source\":\"security@trendmicro.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://success.trendmicro.com/dcx/s/solution/000295652?language=en_US\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.zerodayinitiative.com/advisories/ZDI-23-1614/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]}]}}",
   },
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.