CVE-2021-45442

2022-01-0815:51:08

trendmicro

www.cve.org

0.0004 Low

EPSS

Percentile

16.1%

JSON

A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-2021-44024. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro Worry-Free Business Security",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "10.0 SP1"
      }
    ]
  }
]

References

success.trendmicro.com/solution/000289996

www.zerodayinitiative.com/advisories/ZDI-22-015/

0.0004 Low

EPSS

Percentile

16.1%

JSON

Related for CVELIST:CVE-2021-45442