← back
CVE-2021-25238

CVE-2021-25238

EPSS 2.1%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Feb 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port.
Affected products
Trend Micro · Trend Micro OfficeScanTrend Micro · Trend Micro Worry-Free Business Security

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://success.trendmicro.com/solution/000284205https://success.trendmicro.com/solution/000284206https://www.zerodayinitiative.com/advisories/ZDI-21-121/