Lucene search

[email protected]CVE-2021-25251

HistoryFeb 10, 2021 - 10:15 p.m.

CVE-2021-25251

2021-02-1022:15:13

CWE-94

[email protected]

web.nvd.nist.gov

trend micro

security vulnerability

code injection

cve-2021-25251

nvd

admin privilege

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program’s password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

Affected configurations

NVD

Node

microsoftwindowsMatch-

AND

trendmicroantivirus\+_security_2020Match16.0

trendmicroantivirus\+_security_2021Match17.0

trendmicrointernet_security_2020Match16.0

trendmicrointernet_security_2021Match17.0

trendmicromaximum_security_2020Match16.0

trendmicromaximum_security_2021Match17.0

trendmicropremium_security_2020Match16.0

trendmicropremium_security_2021Match17.0

CPENameOperatorVersion
trendmicro:antivirus\+_security_2020trendmicro antivirus+ security 2020eq16.0
trendmicro:antivirus\+_security_2021trendmicro antivirus+ security 2021eq17.0
trendmicro:internet_security_2020trendmicro internet security 2020eq16.0
trendmicro:internet_security_2021trendmicro internet security 2021eq17.0
trendmicro:maximum_security_2020trendmicro maximum security 2020eq16.0
trendmicro:maximum_security_2021trendmicro maximum security 2021eq17.0
trendmicro:premium_security_2020trendmicro premium security 2020eq16.0
trendmicro:premium_security_2021trendmicro premium security 2021eq17.0

CPE	Name	Operator	Version
trendmicro:antivirus\+_security_2020	trendmicro antivirus+ security 2020	eq	16.0
trendmicro:antivirus\+_security_2021	trendmicro antivirus+ security 2021	eq	17.0
trendmicro:internet_security_2020	trendmicro internet security 2020	eq	16.0
trendmicro:internet_security_2021	trendmicro internet security 2021	eq	17.0
trendmicro:maximum_security_2020	trendmicro maximum security 2020	eq	16.0
trendmicro:maximum_security_2021	trendmicro maximum security 2021	eq	17.0
trendmicro:premium_security_2020	trendmicro premium security 2020	eq	16.0
trendmicro:premium_security_2021	trendmicro premium security 2021	eq	17.0

CNA Affected

[
  {
    "product": "Trend Micro Security (Consumer)\r\n",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2020 (v16), 2021 (v17)"
      }
    ]
  }
]

References

helpcenter.trendmicro.com/en-us/article/TMKA-10211

Social References

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

Related for CVE-2021-25251

prion1 cvelist1 nvd1