Lucene search

TrendmicroCVE-2021-32462

HistoryJul 08, 2021 - 11:15 a.m.

CVE-2021-32462

2021-07-0811:15:12

trendmicro

web.nvd.nist.gov

trend micro

password manager

consumer

vulnerability

remote code execution

cve-2021-32462

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.014

Percentile

86.4%

JSON

Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an unprivileged client to manipulate the registry and escalate privileges to SYSTEM on affected installations. Authentication is required to exploit this vulnerability.

Affected configurations

Nvd

Node

trendmicropassword_managerRange≤5.0.0.1217

AND

microsoftwindowsMatch-

VendorProductVersionCPE
trendmicropassword_manager*cpe:2.3:a:trendmicro:password_manager:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
trendmicro	password_manager	*	cpe:2.3:a:trendmicro:password_manager::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "product": "Trend Micro Password Manager",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.0.1217 and below"
      }
    ]
  }
]

References

helpcenter.trendmicro.com/en-us/article/TMKA-10388

www.zerodayinitiative.com/advisories/ZDI-21-774/

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.014

Percentile

86.4%

JSON

Related for CVE-2021-32462