CVE-2023-47200: Trend Micro Apex One CNTAoSMgr Origin Validation Error Local Privilege Escalation Vulnerability
A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47201.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apex One Client Plug-in Service Manager. The issue results from insufficient validation of the origin of commands. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47200?
CVE-2023-47200 has a high severity rating due to its potential for privilege escalation.
How do I fix CVE-2023-47200?
To fix CVE-2023-47200, ensure that you update the Trend Micro Apex One security agent to the latest version provided by the vendor.
What systems are affected by CVE-2023-47200?
CVE-2023-47200 affects installations of Trend Micro Apex One, specifically versions up to 14.0.12737 and the 2019 version.
Who can exploit CVE-2023-47200?
A local attacker with low-privileged code execution capabilities on the system can exploit CVE-2023-47200.
What are the potential impacts of CVE-2023-47200?
If exploited, CVE-2023-47200 could allow an attacker to escalate their privileges on the affected system.