Trend Micro Released Security Updates – 09 October 2022

The released security updates resolve several vulnerabilities having severity ratings from medium to critical. The remote attacker could exploit some of these vulnerabilities to gain privileged access to the affected system.

Samples of the addressed vulnerabilities:

1. Apex One Forced Browsing Privilege Escalation (CVE-2022-41746):

• CVSS: 9.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: High
• User Interaction: None
• Consequences: Gain Privileges

2. Apex One Security Agent Improper Certification Validation Privilege Escalation (CVE-2022-41747):

• CVSS: 7.8
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges