QID 377878

Trend Micro Apex One protection offers advanced automated threat detection and response against an ever-growing variety of threats, including file-less and ransomware.

CVE-2022-45797: An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations.
CVE-2022-45798: A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges by creating a symbolic link and abusing the service to delete a file.

Note: An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Versions:
Trend Micro Apex One 2019 (On-Prem) prior to build 11136

QID Detection Logic:(Authenticated):
This QID checks for vulnerable version of Trend Micro Apex by fetching the version from registry

Successful exploitation of the vulnerability may allow a local attacker to escalate privileges on and modify files.