CVE-2020-28572: 
Trend Micro Apex One Agent vulnerability analysis and mitigation

A vulnerability in Trend Micro Apex One (CVE-2020-28572) was discovered that could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege. The vulnerability was disclosed on November 18, 2020 and affects Trend Micro Apex One 2019 and Microsoft Windows systems (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a Base Score of 4.6 (MEDIUM) with vector: (AV:L/AC:L/Au:N/C:P/I:P/A:P) (NVD).

If exploited, this vulnerability allows an attacker with unprivileged access to execute malicious code with elevated privileges through the product installer, potentially compromising the security of the affected system (NVD).

Trend Micro has addressed this vulnerability through their official channels. Users should refer to the vendor advisory for specific mitigation steps and patches (Vendor Advisory).