Description
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation. Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Trend Micro, Inc. Trend Micro Apex One
2019 (14.0) to < 14.0.0.12380affected
Trend Micro, Inc. Trend Micro Apex One
SaaS to < 14.0.12637affected
Trend Micro, Inc. Trend Micro Worry-Free Business Security
10.0 SP1 to < 10.0 SP1 Build 2495affected
Trend Micro, Inc. Trend Micro Worry-Free Business Security Services
SaaS to < 6.7.3578 / 14.3.1105affected