Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mp4q-gcm4-ww9c

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

EPSS

Процентиль: 64%
0.00479
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49220 but is in a different method.

CVSS3: 8.8
fstec
11 месяцев назад

Уязвимость реализации метода DeserializeFromBase64String сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption (TMEE), позволяющая нарушителю выполнить произвольный код в контексте SYSTEM

EPSS

Процентиль: 64%
0.00479
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477