Trend Micro Releases Urgent Fix for Actively Exploited Critical Security Vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2014-8361 | Improper Input Validation in Realtek SDK miniigd SOAP Service Enables Remote RCE | — | 100% | KEV | — KEV |
| CVE-2017-6884 | Command Injection in Zyxel EMG2926 Router Diagnostics | 8.8 | 33% | KEVRansomwarePoC | KEV |
| CVE-2021-3129 | Unauthenticated RCE in Laravel Ignition error-page package (facade/ignition) | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
| CVE-2022-22265 | Use-After-Free in Samsung Mobile NPU Driver Allows Local Code Execution | 7.8 | <1% | KEV | KEV |
CVE-2022-31462+4 related CVEs | Owl Labs Meeting Owl 5.2.0.15 allows attackers to control the device via a backdoor password (derived from the serial number) that can be found in Bluetooth… | 8.8 group max | <1% | PoC | |
CVE-2023-28434+1 related CVE | Bucket Policy Bypass in MinIO Object Storage Lets Users Write to Any Bucket | 8.8 group max | 8% | KEVPoC | KEV |
| CVE-2023-41179 | Arbitrary command execution in Trend Micro Apex One and Worry-Free Business Security | 7.2 | 4% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Cybersecurity company Trend Micro has released patches and hotfixes to address a critical security flaw in Apex One and Worry-Free Business Security solutions for Windows that has been actively exploited in real-world attacks. Tracked as CVE-2023-41179 (CVSS score: 9. 1), it relates to a third-party antivirus uninstaller module that's bundled along with the software.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.