CVE-2021-25246
CVE-2021-25246
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
04 feb 2021Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries.
Productos afectados
Trend Micro · Trend Micro Apex OneTrend Micro · Trend Micro OfficeScanTrend Micro · Trend Micro Worry-Free Business Security¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →