Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-25147 EUVD-2023-29125GHSA-x6x2-74g9-vjcw

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to byp…

Published Mar 7, 2023 · Updated Mar 5, 2025 · Assigned by trendmicro

Description

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection by using a specifically crafted DLL during a specific update process.

Please note: an attacker must first obtain administrative access on the target system via another method in order to exploit this.

Affected products

VendorProductAffectedFixed
Trend Micro Trend Micro Apex One 2019 (14.0) – < 14.0.0.11564 14.0.0.11564

Advisories 1

References