← Back to CVE List
Vulnerability Intelligence Report

CVE-2021-45231

A link following privilege escalation vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on the affected system. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

No Active Exploit Signals
CVSS Base Score
7.8
HIGH
EPSS Probability:0.64%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
Trend Micro Trend Micro Apex One 2019, SaaS (affected)
Trend Micro Trend Micro Worry-Free Business Security 10.0 SP1, Services (SaaS) (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
0.643%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityTrend Micro, Inc. · Vendor · Japan
Reserved2021-12-17T00:00:00
Published2022-01-08T15:51:05
Last Updated2024-08-04T04:39:20

LINK COPIED TO CLIPBOARD