Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises

🗓️ 04 Aug 2021 02:15:14Reported by Japan Vulnerability NotesType

Multiple Trend Micro Endpoint vulnerabilities allow SYSTEM access and login bypass; patches available.

Reporter	Title	Published	Views	Family All 58
ATTACKERKB	CVE-2021-32464	4 Aug 202119:15	–	attackerkb
ATTACKERKB	CVE-2021-32465	4 Aug 202119:15	–	attackerkb
ATTACKERKB	CVE-2021-36742	29 Jul 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-36741	29 Jul 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of the Trend Micro Worry-Free Business Security and Apex One anti-virus software lies in their lack of access control mechanisms, allowing attackers to execute arbitrary code.	25 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Trend Micro Worry-Free Business Security and Apex One anti-virus software lies in the lack of restrictions on file downloads, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	25 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Apex One and OfficeScan antivirus software lies in errors during the saving of permissions, allowing a hacker to bypass the security measures.	25 Aug 202100:00	–	bdu_fstec
Circl	CVE-2021-32464	4 Aug 202123:23	–	circl
Circl	CVE-2021-32465	4 Aug 202123:23	–	circl
Circl	CVE-2021-36741	30 Jul 202100:14	–	circl

Source	Link
success	www.success.trendmicro.com/solution/000287819
success	www.success.trendmicro.com/solution/000287820
success	www.success.trendmicro.com/solution/000286857
appweb	www.appweb.trendmicro.com/SupportNews/NewsDetail.aspx
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
jpcert	www.jpcert.or.jp/at/2021/at210033.html

04 Aug 2021 02:15Current

9.5High risk

Vulners AI Score9.5

CVSS 27.2

CVSS 37.8

CVSS 3.18.8

EPSS0.04951

SSVC