CVE-2022-24679: Trend Micro Apex One Security Agent Link Following Local Privilege Escalation Vulnerability
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create an writable folder in an arbitrary location and escalate privileges affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NT Apex One RealTime Scan Service. By creating a DOS device redirection, an attacker can abuse the service to create a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-24679?
CVE-2022-24679 is a vulnerability that allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent.
How can an attacker exploit CVE-2022-24679?
An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Which software is affected by CVE-2022-24679?
Trend Micro Apex One and Worry-Free Business Security versions 2019 and earlier, as well as Worry-Free Business Security Services, are affected.
What is the severity of CVE-2022-24679?
CVE-2022-24679 has a severity rating of 7.8 (high).
How can I fix CVE-2022-24679?
To fix CVE-2022-24679, update to the latest version of Trend Micro Apex One and Worry-Free Business Security, as recommended by Trend Micro.