CVE-2023-52337: Trend Micro Deep Security Improper Access Control Local Privilege Escalation Vulnerability
An improper access control vulnerability in Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Deep Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Anti-Malware Solution Platform. The product applies insufficient access controls to a sensitive folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52337?
CVE-2023-52337 is categorized with a high severity level due to its potential to allow local privilege escalation.
Who is affected by CVE-2023-52337?
CVE-2023-52337 affects users of Trend Micro Deep Security 20.0 and its associated endpoints and workload security agents.
How do I fix CVE-2023-52337?
To fix CVE-2023-52337, apply the latest security patches and updates provided by Trend Micro for Deep Security.
What is the nature of the vulnerability in CVE-2023-52337?
CVE-2023-52337 is an improper access control vulnerability that could allow an attacker to escalate privileges.
What initial requirements does an attacker need to exploit CVE-2023-52337?
To exploit CVE-2023-52337, an attacker must first obtain the ability to execute commands on the affected installed systems.