CVE-2021-25250

EPSS 0.5%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 abr 2021Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Produtos afetados

Trend Micro · Trend Micro Apex One Trend Micro · Trend Micro OfficeScan

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://success.trendmicro.com/solution/000286019 https://success.trendmicro.com/solution/000286157 https://www.zerodayinitiative.com/advisories/ZDI-21-400/