Trend Micro Apex One 中存在安全代理链接跟踪漏洞，可能允许本地攻击者在受影响的安装环境中提升权限。 请注意：攻击者必须首先获得在目标系统上执行低权限代码的能力才能利用此漏洞。

Successful exploitation of CVE-2024-55632 allows an attacker who already possesses the ability to execute low-privileged code on a system to escalate their privileges. This means an attacker could potentially gain SYSTEM-level access, allowing them to install malware, modify system configurations, steal sensitive data, or disrupt operations. The impact is significant as it bypasses standard access controls and grants the attacker near-complete control over the compromised machine. This vulnerability is particularly concerning in environments where Apex One is deployed as a primary endpoint security solution, as a successful attack could compromise the entire endpoint.

Organizations heavily reliant on Trend Micro Apex One for endpoint security are at significant risk. Environments with weak access controls or where low-privileged users have broad permissions are particularly vulnerable. Shared hosting environments utilizing Apex One should also be assessed for potential impact.

• windows / supply-chain:

Get-Process -Name ApexOne | Select-Object -ExpandProperty Path

• windows / supply-chain:

Get-WinEvent -LogName Application -Filter "EventID = 1001 and ProviderName = 'Trend Micro Apex One'"

• windows / supply-chain:

Get-ScheduledTask | Where-Object {$_.TaskName -like '*ApexOne*'}

1. 2024-12-31Disclosure

   disclosure

1. 已保留2024-12-09
2. 发布日期2024-12-31
3. EPSS 更新日期2026-04-02

The primary mitigation for CVE-2024-55632 is to upgrade Trend Micro Apex One to version 14.0.14203 or later. If immediate upgrading is not possible, consider implementing stricter access controls and monitoring for suspicious activity. Review existing security policies to ensure they limit the ability of low-privileged users to execute code. While a direct workaround isn't available, regularly scanning systems for unauthorized processes and unusual network connections can help detect potential exploitation attempts. After upgrade, confirm by verifying the Apex One version is 14.0.14203 or higher via the Apex One console.