CVE-2021-32464: Trend Micro Worry-Free Business Security Incorrect Permission Assignment Privilege Escalation Vulnerability
An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an attacker to modify a specific script before it is executed. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Worry-Free Business Services Agent. The issue results from incorrect permissions set on a resource used by the service. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-32464?
CVE-2021-32464 is a vulnerability that allows local attackers to escalate privileges on affected installations of Trend Micro Worry-Free Business Security.
How can the CVE-2021-32464 vulnerability be exploited?
In order to exploit the CVE-2021-32464 vulnerability, an attacker must first obtain the ability to execute low-privileged code on the target system.
What is the severity of CVE-2021-32464?
CVE-2021-32464 has a severity value of 7.8, indicating a high severity.
Which software installations are affected by CVE-2021-32464?
CVE-2021-32464 affects installations of Trend Micro Worry-Free Business Security, Apex One (version 2019), and Officescan XG SP1.
How can I fix the CVE-2021-32464 vulnerability?
To fix the CVE-2021-32464 vulnerability, it is recommended to apply the necessary security patches or updates provided by Trend Micro.