CVE-2021-42107

🗓️ 21 Oct 2021 07:46:10Reported by trendmicroType

Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42105 and 42106

Reporter	Title	Published	Views	Family All 9
CNNVD	Trend Micro Apex One 安全漏洞	14 Oct 202100:00	–	cnnvd
CNVD	Trend Micro Apex One Unnecessary Privilege Vulnerability	18 Oct 202100:00	–	cnvd
Cvelist	CVE-2021-42107	21 Oct 202107:46	–	cvelist
EUVD	EUVD-2021-29093	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Trend Micro Apex One	19 Oct 202100:00	–	ncsc
NVD	CVE-2021-42107	21 Oct 202108:15	–	nvd
Prion	Design/Logic Flaw	21 Oct 202108:15	–	prion
RedhatCVE	CVE-2021-42107	22 May 202521:06	–	redhatcve
Zero Day Initiative	Trend Micro Apex One Unnecessary Privileges Local Privilege Escalation Vulnerability	19 Oct 202100:00	–	zdi

NVD

Node

trendmicro apex_oneMatch2019

trendmicro apex_oneMatch2019saas

trendmicro worry-free_business_securityMatch10.0sp1

trendmicro worry-free_business_security_servicesMatch-saas

AND

microsoft windowsMatch-

[
  {
    "product": "Trend Micro Apex One",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2019, SaaS"
      }
    ]
  },
  {
    "product": "Trend Micro Worry-Free Business Security",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "10.0 SP1, Services (SaaS)"
      }
    ]
  }
]

Source	Link
success	www.success.trendmicro.com/solution/000289229
success	www.success.trendmicro.com/solution/000289230
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-1214/

21 Nov 2024 06:27Current

7.7High risk

Vulners AI Score7.7

CVSS 24.6

CVSS 3.17.8

EPSS0.00123

CWE-269