Apex One and Apex Central
CVE-2023-41179: Apex One and Worry-Free Business Security Remote Code Execution
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Trend Micro Apex One 2019 (14.0) | 14.0.0.12380 or later |
| Trend Micro Apex One SaaS | 14.0.12637 or later |
| Trend Micro Worry-Free Business Security 10.0 SP1 | 10.0 SP1 Build 2495 or later |
| Trend Micro Worry-Free Business Security Services SaaS | 6.7.3578 / 14.3.1105 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free Business Security and Worry-Free Business Security Services could allow an attacker to manipulate the module to execute arbitrary commands on an affected installation.
Note that an attacker must first obtain administrative console access on the target system in order to exploit this vulnerability.
Exploitation
CISA lists this CVE as exploited in the wild since 21 Sept 2023.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 12 Oct 2026.