← voltar
CVE-2021-25236

CVE-2021-25236

EPSS 1.9%
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
04 fev 2021Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep.
Produtos afetados
Trend Micro · Trend Micro OfficeScanTrend Micro · Trend Micro Worry-Free Business Security

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://success.trendmicro.com/solution/000284205https://success.trendmicro.com/solution/000284206https://www.zerodayinitiative.com/advisories/ZDI-21-120/