Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h576-r27x-2cjg

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method.

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method.

EPSS

Процентиль: 88%
0.03929
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
8 месяцев назад

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49212 but is in a different method.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость класса PolicyServerWindowsService сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption (TMEE), позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 88%
0.03929
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502