PoC Powershell script for exploiting Trend Micro Apex One installer. Please pay attention to paths as these are hardcoded into the script.

The rest is very simple.

For Apex One SaaS: it has been included on 2024 March Release For Apex One On-premise: Critical Patch 12952 is now published on the download center: https://downloadcenter.trendmicro.com/index.php?regs=NABU&prodid=1745&_ga=2.178471332.1641307238.1569316835-1612586666.1568798607#fragment-5350