CVE-2022-24680: Trend Micro Apex One Security Agent Link Following Local Privilege Escalation Vulnerability
A security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1 and Trend Micro Worry-Free Business Security Services agents could allow a local attacker to create a mount point and leverage this for arbitrary folder deletion, leading to escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NT Apex One RealTime Scan Service. By creating a mount point, an attacker can abuse the service to delete a folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-24680?
CVE-2022-24680 is a security link following local privilege escalation vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service, Trend Micro Worry-Free Business Security 10.0 SP1, and Trend Micro Worry-Free Business Security Services agents.
How does CVE-2022-24680 impact Trend Micro products?
CVE-2022-24680 allows a local attacker to create a mount point and escalate their privileges on affected Trend Micro products.
Which versions of Trend Micro Apex One and Worry-Free Business Security are affected by CVE-2022-24680?
CVE-2022-24680 affects Trend Micro Apex One versions up to 2019 and Trend Micro Worry-Free Business Security 10.0 SP1.
How severe is CVE-2022-24680?
CVE-2022-24680 has a severity rating of 7.8 (high).
How can I mitigate CVE-2022-24680?
To mitigate CVE-2022-24680, apply the necessary patches or updates provided by Trend Micro and follow their recommended security best practices.