Link Following Denial-of-Service Vulnerability in Trend Micro Apex One and Worry-Free Business Security

CVE-2021-44024

Summary

A vulnerability in Trend Micro's Apex One and Worry-Free Business Security products allows a local attacker to exploit a link following denial-of-service weakness. This exploit can lead to arbitrary file overwriting in the context of SYSTEM privileges. To execute this attack, an attacker must first have the capability to run low-privileged code on the affected system, thereby elevating their access rights and compromising system integrity.

References