CVE-2020-28572: 
Trend Micro Apex One Agent vulnerability analysis and mitigation

A vulnerability in Trend Micro Apex One (CVE-2020-28572) was discovered that could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege. The vulnerability was disclosed on November 18, 2020 and affects Trend Micro Apex One 2019 and Microsoft Windows systems (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a Base Score of 4.6 (MEDIUM) with vector: (AV:L/AC:L/Au:N/C:P/I:P/A:P) (NVD).

If exploited, this vulnerability allows an attacker with unprivileged access to execute malicious code with elevated privileges through the product installer, potentially compromising the security of the affected system (NVD).

The vulnerability requires local access and low privileges to exploit, with no user interaction needed. The attack complexity is considered low, making it relatively straightforward to exploit if an attacker has the necessary local access (NVD).

Trend Micro has addressed this vulnerability through their official channels. Users should refer to the vendor advisory for specific mitigation steps and patches (Vendor Advisory).