Improper Access Control in Trend Micro Deep Security and Cloud One Products
CVE-2023-52337
Key Information:
- Vendor
Trend Micro
- Vendor
- CVE Published:
- 23 January 2024
What is CVE-2023-52337?
An improper access control vulnerability exists within Trend Micro's Deep Security 20.0 and Cloud One - Endpoint and Workload Security Agent. This vulnerability permits local attackers to escalate their privileges on systems where the affected products are installed. To exploit this vulnerability, an attacker must first execute low-privileged code on the target machine. This highlights the essential need for robust access control measures to safeguard against unauthorized privilege escalation, reinforcing the importance of secure software development practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Trend Micro Deep Security Agent 20.0 < 20.0.0-8438
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved