CVE-2023-25143

Deeper analysis

An uncontrolled search path element vulnerability, tracked as CVE-2023-25143 and assigned CWE-427, affects the installer component of Trend Micro Apex One Server. The flaw carries a CVSS 3.1 score of 9.8 and permits remote code execution on affected installations when an attacker supplies a malicious executable in an uncontrolled search path.

Because the vulnerability is exploitable over the network with no authentication or user interaction required, an unauthenticated remote attacker can achieve arbitrary code execution with full confidentiality, integrity, and availability impact on the target server. Successful exploitation grants the attacker the ability to run code in the context of the installer process, potentially leading to complete compromise of the Apex One Server.

Trend Micro has published mitigation guidance in solution article 000292209, which addresses the affected installer. The EPSS score for this CVE rose from a low baseline to a peak of 0.0618 before receding to its current value of 0.0194, indicating a temporary increase in observed exploitation interest after disclosure.