Analysis Summary

CVE-2024-41183

Trend Micro VPN Proxy One Pro could allow a local authenticated attacker to gain elevated privileges on the system, caused by a problem within the DEP Manager. By creating a symbolic link, an attacker could exploit this vulnerability to abuse the service to delete a folder and execute arbitrary code in the context of SYSTEM.

Impact

• Privilege Escalation

Indicators of Compromise

CVE

• CVE-2024-41183

Affected Vendors

Remediation

Refer to Trend Micro Security Advisory for patch, upgrade or suggested workaround information.

Trend Micro Security Advisory