CVE-2021-25239

EPSS 2.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

04 Feb 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes.

Affected products

Trend Micro · Trend Micro Apex One Trend Micro · Trend Micro OfficeScan Trend Micro · Trend Micro Worry-Free Business Security

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://success.trendmicro.com/solution/000284202 https://success.trendmicro.com/solution/000284205 https://success.trendmicro.com/solution/000284206 https://www.zerodayinitiative.com/advisories/ZDI-21-112/