Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qh4c-q793-rvmw

Опубликовано: 17 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method.

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method.

EPSS

Процентиль: 84%
0.02198
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
8 месяцев назад

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method.

CVSS3: 9.8
fstec
8 месяцев назад

Уязвимость функции ValidateToken сервера PolicyServer средства шифрования данных Trend Micro Endpoint Encryption (TMEE), позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 84%
0.02198
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-477
CWE-502