PT-2023-8406 · Trend Micro · Trend Micro Cloud One - Endpoint/Workload Security Agent+1

Abdelhamid Naceri

·

Published

2023-07-08

·

Updated

2024-01-31

·

CVE-2023-52337

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trend Micro Deep Security version 20.0 Trend Micro Cloud One - Endpoint and Workload Security Agent (affected versions not specified)
Description An improper access control issue could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The vulnerability is related to insufficient access control to folders in the Anti-Malware module of the Trend Micro Deep Security Agent for Windows operating systems, which may enable an attacker to elevate their privileges and execute arbitrary code.
Recommendations For Trend Micro Deep Security version 20.0, update to a version that includes the fix for this issue. For Trend Micro Cloud One - Endpoint and Workload Security Agent, apply the recommended configuration changes or patches as soon as they become available to address the improper access control vulnerability. As a temporary workaround, consider restricting access to sensitive folders and modules to minimize the risk of exploitation.

Fix

Improper Access Control

Improper Privilege Management

Weakness Enumeration

Related Identifiers

BDU:2024-00664
CVE-2023-52337
ZDI-24-075

Affected Products

Trend Micro Cloud One - Endpoint/Workload Security Agent
Trend Micro Deep Security