QID 378713

Trend Micro Apex One protection offers advanced automated threat detection and response against an ever-growing variety of threats, including file-less and ransomware.

CVE-2023-0587 : Server File Upload Vulnerability CVE-2023-25143 : Uncontrolled Search Path Element Local Remote Code Execution Vulnerability CVE-2023-25144 : Improper Access Control Local Privilege Escalation Vulnerability CVE-2023-25145 : Link Following Local Privilege Escalation Vulnerability CVE-2023-25146 : Security Agent Link Following Local Privilege Escalation Vulnerability CVE-2023-25147 : Administrator Bypass CVE-2023-25148 : Security Agent Link Following Local Privilege Escalation Vulnerability Note: some of the vulnerabilities may have been technically addressed in earlier patches, but it is highly recommended that customers apply the latest available patch to ensure that all known vulnerabilities and issues are resolved.

Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Affected Versions:
Trend Micro Apex One 2019 (On-Prem) prior to Build 11564

QID Detection Logic:(Authenticated):
This QID checks for vulnerable version of Trend Micro Apex by fetching the version from registry

Successful exploitation of the vulnerability may allow a local attacker to escalate privileges on and modify files.