Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mp4q-gcm4-ww9c

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

EPSS

Процентиль: 88%
0.03929
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
8 месяцев назад

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость реализации метода DeserializeFromBase64String сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption (TMEE), позволяющая нарушителю выполнить произвольный код в контексте SYSTEM

EPSS

Процентиль: 88%
0.03929
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502