CVE-2024-37289: Trend Micro Apex One Improper Access Control Local Privilege Escalation Vulnerability
An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Apex One Security Agent. The specific flaw exists within the logic that controls access to the Suspect folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-37289?
The severity of CVE-2024-37289 is classified as high due to its potential for privilege escalation.
How do I fix CVE-2024-37289?
To fix CVE-2024-37289, ensure that you update your Trend Micro Apex One installation to the latest available version.
Who is affected by CVE-2024-37289?
CVE-2024-37289 affects users of Trend Micro Apex One who have not applied the necessary security updates.
What types of attacks can CVE-2024-37289 facilitate?
CVE-2024-37289 can facilitate local privilege escalation attacks by allowing unauthorized users to gain elevated permissions.
Is remote access needed to exploit CVE-2024-37289?
No, an attacker must first execute low-privileged code on the target system, indicating local access is required for CVE-2024-37289.