CVE-2023-47201: Trend Micro Apex One CNTAoSMgr Origin Validation Error Local Privilege Escalation Vulnerability
A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2023-47200.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apex One Client Plug-in Service Manager. The issue results from insufficient validation of the origin of commands. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47201?
CVE-2023-47201 is rated as a medium severity vulnerability, allowing privilege escalation for local attackers.
How do I fix CVE-2023-47201?
To remediate CVE-2023-47201, users should update their Trend Micro Apex One installation to the latest version provided by the vendor.
Who is affected by CVE-2023-47201?
CVE-2023-47201 affects installations of Trend Micro Apex One prior to version 14.0.12737 and the 2019 version.
Can remote attackers exploit CVE-2023-47201?
No, CVE-2023-47201 requires local access to the system to exploit the vulnerability.
What kind of attacks can CVE-2023-47201 facilitate?
CVE-2023-47201 can facilitate privilege escalation attacks on affected systems.