QID 379319

Trend Micro Apex One protection offers advanced automated threat detection and response against an ever-growing variety of threats, including file-less and ransomware.

CVE-2023-52090: Agent Engine Link Following Local Privilege Escalation Vulnerability
CVE-2023-52091: Anti-Spyware Engine Link Following Local Privilege Escalation Vulnerability
CVE-2023-52092: Security Agent Link Following Local Privilege Escalation Vulnerability
CVE-2023-52093: Exposed Dangerous Function Local Privilege Escalation Vulnerability
CVE-2023-52094: Updater Link Following Local Privilege Escalation Vulnerability

Note: some of the vulnerabilities may have been technically addressed in earlier patches, but it is highly recommended that customers apply the latest available patch to ensure that all known vulnerabilities and issues are resolved.

Note:
An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected Versions:
Trend Micro Apex One 2019 (On-Prem) prior to SP1 Critical Patch Build 12534

QID Detection Logic:(Authenticated):
This QID checks for vulnerable version of Trend Micro Apex by fetching the version from registry

Successful exploitation of the vulnerability may allow a local attacker to escalate privileges on and modify files.