Lucene search

[email protected]CVE-2022-25331

HistoryFeb 24, 2022 - 3:15 a.m.

CVE-2022-25331

2022-02-2403:15:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2022-25331

trend micro

serverprotection

information server

remote attacker

vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

58.3%

JSON

Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process.

CPENameOperatorVersion
trendmicro:serverprotecttrendmicro serverprotecteq5.8
trendmicro:serverprotect_for_network_appliance_filertrendmicro serverprotect for network appliance filereq5.8
trendmicro:serverprotect_for_storagetrendmicro serverprotect for storageeq6.0

CPE	Name	Operator	Version
trendmicro:serverprotect	trendmicro serverprotect	eq	5.8
trendmicro:serverprotect_for_network_appliance_filer	trendmicro serverprotect for network appliance filer	eq	5.8
trendmicro:serverprotect_for_storage	trendmicro serverprotect for storage	eq	6.0

References

success.trendmicro.com/solution/000290507

www.tenable.com/security/research/tra-2022-05

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

58.3%

JSON

Related for CVE-2022-25331

prion1 cvelist1