Trend Micro has issued a security bulletin regarding eight vulnerabilities in its Apex One and Apex One (Mac) solutions. The most severe are two critical remote code execution (RCE) flaws that could allow attackers to execute arbitrary commands on unpatched systems.
Critical RCE Vulnerabilities
- CVE-2025-71210 & CVE-2025-71211: Both carry a CVSS score of 9.8.
- Impact: These are directory traversal weaknesses in the management console.
- Execution: A remote attacker can upload malicious code and execute commands on vulnerable installations.
- Prerequisite: Exploitation typically requires access to the management console; Trend Micro warns against exposing console IP addresses to the public internet.
High-Severity Flaws
The remaining six vulnerabilities are rated High:
- Privilege Escalation: Flaws in the scan engine and origin validation allow attackers with low-privileged access to escalate their rights.
- macOS Specifics: Several flaws affecting the Apex One (mac) agent were addressed via updates but are officially documented in this cycle.
Recommended Actions
- Apply Updates: On-premises users should immediately update to the latest builds via the Trend Micro Support portal.
- Restrict Console Access: Ensure the management console is not reachable from the public internet.
- SaaS Users: Customers using Apex One as a Service are already protected, as mitigations were applied automatically.
