PT-2022-17217

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect versions 5.8 through 6.0 Description The issue is related to integer overflow conditions in the Trend Micro ServerProtect Information Server, which could allow a remote attacker to crash the process or achieve remote...

CVE-2022-25329: Use of Hard-coded Credentials

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated...

CVE-2022-25330: Integer Overflow or Wraparound

Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution...

Trend Micro ServerProtect 输入验证错误漏洞

Trend Micro ServerProtect is an enterprise-grade anti-virus program from Trend Micro, Inc. It is used to protect network-connected storage systems and block threats at their source. A security vulnerability exists in Trend Micro ServerProtect, which exists because the application may generate...

Trend Micro ServerProtect信任管理问题漏洞

Trend Micro ServerProtect is an enterprise-grade anti-virus program from Trend Micro, Inc. It is designed to protect Internet-connected storage systems and block threats at their source. Trend Micro ServerProtect suffers from a trust management issue vulnerability that originates from the presenc...

Trend Micro ServerProtect 安全漏洞

Trend Micro ServerProtect is an enterprise-grade anti-virus program from Trend Micro, Inc. It is used to protect network-connected storage systems and block threats at their source. A security vulnerability exists in Trend Micro ServerProtect that originates from an integer overflow. The...

Trend Micro ServerProtect Information Server Detection

Binary data trendmicroserverprotectinfoserverdetect.nbin...

Trend Micro ServerProtect Authentication Bypass Vulnerability (CVE-2021-36745)

Binary data trendmicroserverprotectcve-2021-36745.nbin...

PT-2021-6153

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtection versions 5.8 through 6.0 ServerProtect for Storage SPFS affected versions not specified ServerProtect for EMC Celerra SPEMC affected versions not specified ServerProtect for Network Appliance Filers SPNAF affected...

PT-2021-6152

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect versions 5.8 through 6.0 Description The issue is related to the use of static credentials for authentication in the Information Server when a specific command is entered in the console. This could allow an...

ServerProtect Management Console Authentication Bypass

The vulnerability of the ServerProtect Management Console for Server Protection and ServerProtect for Storage Systems SPFS, ServerProtect for EMC Celerra SPEMC, ServerProtect for Network Appliance Filers SPNAF, and ServerProtect for Microsoft Windows/Novell Netware SPNT is related to authenticati...

Trend Micro ServerProtect family vulnerable to authentication bypass

Overview Trend Micro Incorporated has released security updates for ServerProtect family. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A remote attacker may bypass authentication for the products. For more information, refer...

CVE-2021-36745

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations...

CVE-2021-36745

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations...

CVE-2021-36745

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations...

CVE-2021-36745

Trend Micro ServerProtect family (Storage 6.0; EMC Celerra 5.8; Network Appliance Filers 5.8; Windows/Netware 5.8) contains an authentication bypass vulnerability in the ServerProtect console that could allow a remote attacker to bypass authentication. Affects multiple platforms; CVSS reported as...

CVE-2021-36745

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations...

CVE-2021-36745: Direct Request

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations...

Trend Micro ServerProtect Authorization Issues Vulnerability

Trend Micro ServerProtect is an enterprise-grade anti-virus program from Trend Micro, Inc. It is used to protect network-connected storage systems and block threats at the source. Trend Micro ServerProtect suffers from an authorization problem vulnerability that originates from an error in the...

Vulnerability fixed in Trend Micro ServerProtect

Trend Micro has fixed a vulnerability in ServerProtect. A unauthenticated malicious party could potentially abuse it to bypass authentication. The vulnerability has a CVSS3.1 score of 9.8 assigned. Content-wise, however, few technical details made publicly available. Trend Micro has released...