CVE-2023-41179—Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

PUBLISHEDvulnerability record

2023-09-21 · last modified June 21, 2025

Metadata

CVE ID:: CVE-2023-41179
Project:: Trend Micro
Product:: Apex One and Worry-Free Business Security
Date Added:: 2023-09-21
Due Date:: 2023-10-12
Last Updated:: June 21, 2025

Vulnerability Name

Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

Description

Trend Micro Apex One and Worry-Free Business Security contain an unspecified vulnerability in the third-party anti-virus uninstaller that could allow an attacker to manipulate the module to conduct remote code execution. An attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.