Arbitrary File Creation and Privilege Escalation in Trend Micro Apex One

CVE-2021-3848

What is CVE-2021-3848?

This vulnerability in Trend Micro's Apex One and Worry-Free Business Security products allows a local attacker to create arbitrary files with elevated privileges. By exploiting this issue, an attacker who has already executed low-privileged code on a target machine can perform actions that may disrupt service, potentially leading to a denial-of-service situation. Proper mitigation and system updates are essential to safeguard against these types of threats.

References