CVE-2021-25251

Опубликовано: 10 фев. 2021

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

Ссылки

https://helpcenter.trendmicro.com/en-us/article/TMKA-10211
Vendor Advisory
https://helpcenter.trendmicro.com/en-us/article/TMKA-10211
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:trendmicro:antivirus\+_security_2020:16.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:antivirus\+_security_2021:17.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:internet_security_2020:16.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:internet_security_2021:17.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:maximum_security_2020:16.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:maximum_security_2021:17.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:premium_security_2020:16.0:*:*:*:*:*:*:*

cpe:2.3:a:trendmicro:premium_security_2021:17.0:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00862

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-3pw2-j2vj-ghmp

github

больше 3 лет назад

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program’s password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.