CVE-2022-25330

Опубликовано: 24 фев. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.

Ссылки

https://success.trendmicro.com/solution/000290507
Patch
Vendor Advisory
https://www.tenable.com/security/research/tra-2022-05
Exploit
Third Party Advisory
https://success.trendmicro.com/solution/000290507
Patch
Vendor Advisory
https://www.tenable.com/security/research/tra-2022-05
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:emc:*:*

cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:netware:*:*

cpe:2.3:a:trendmicro:serverprotect:5.8:*:*:*:*:windows:*:*

cpe:2.3:a:trendmicro:serverprotect_for_network_appliance_filer:5.8:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:trendmicro:serverprotect_for_storage:6.0:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04909

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-190

Связанные уязвимости

GHSA-3r6p-fgmm-jf23

github

почти 4 года назад