# CVE-2023-41179: Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

Source: https://junglewise.ai/threats/cve-2023-41179-trend-micro-apex-one-and-worry-free-business-security-remote-code  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2023-09-21. Updated: 2026-05-09  
License: CC BY 4.0 with a link back

CVE-2023-41179 · Severity: critical · CVSS 7.2 · Exploited in the wild · Published 2023-09-21

A vulnerability in the third-party anti-virus uninstaller module within Trend Micro Apex One and Worry-Free Business Security allows for remote code execution. An attacker with administrative console access can manipulate the module to execute arbitrary commands on the target system.

Technologies: [Trend Micro Apex One](https://junglewise.ai/threats/technologies/apex-one), [Trend Micro Apex One as a Service](https://junglewise.ai/threats/technologies/apex-one-as-a-service). Vendors: [Trend Micro](https://junglewise.ai/threats/vendors/trend-micro).

## Quick answers

**Is CVE-2023-41179 exploited in the wild?** Yes. CVE-2023-41179 is known to be exploited in the wild, first recorded on 21 September 2023. Treat it as urgent.

**How severe is CVE-2023-41179?** Critical severity, with a CVSS score of 7.2, published 21 September 2023.

**Which products and versions are affected?** Trend Micro Apex One (on-prem and SaaS) 2019; Trend Micro Worry-Free Business Security 10.0 SP1; Trend Micro Worry-Free Business Security Services (SaaS).

**Is there a fix for CVE-2023-41179?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2023-41179 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2023-41179?** Check whether you run Trend Micro Apex One, Trend Micro Apex One as a Service or Trend Micro Worry-Free Business Security. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Trend Micro Apex One (on-prem and SaaS) 2019
- Trend Micro Worry-Free Business Security 10.0 SP1
- Trend Micro Worry-Free Business Security Services (SaaS)

## Timeline

- 2023-09-21: disclosed
- 2023-09-21: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
- 2023-09-21: exploited: Reported as exploited in the wild.

## Related threats

- [Trend Micro Apex One OS command injection in management console](https://junglewise.ai/threats/cve-2025-54948-trend-micro-apex-one-os-command-injection-in-management-console)
- [Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability](https://junglewise.ai/threats/cve-2022-40139-trend-micro-apex-one-and-apex-one-as-a-service-improper)