CVE-2021-25251

2021-02-1022:00:15

trendmicro

www.cve.org

trend micro

code injection

password protection

vulnerability

bypass

administrator privileges

AI Score

7.3

Confidence

High

EPSS

0.001

Percentile

38.8%

JSON

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program’s password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro Security (Consumer)\r\n",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "2020 (v16), 2021 (v17)"
      }
    ]
  }
]

References

helpcenter.trendmicro.com/en-us/article/TMKA-10211