Null Pointer Vulnerability in Trend Micro Apex One and Worry-Free Business Security
CVE-2021-23139

7.5HIGH

Key Information:

Vendor

Trend Micro
Status
Trend Micro Apex One
Trend Micro Worry-free Business Security
Vendor
CVE Published:
21 October 2021

What is CVE-2021-23139?

An identified null pointer vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 can be exploited to crash the CGI program on affected systems. This could potentially disrupt service and lead to data inaccessibility for users. Organizations should take immediate steps to implement vendor-recommended updates to mitigate this risk and ensure their security posture remains robust. For further details, please refer to Trend Micro's official resources.

Affected Version(s)

Trend Micro Apex One 2019

Trend Micro Worry-Free Business Security 10.0 SP1

References

https://success.trendmicro.com/solution/000289229
x_refsource_MISC
https://success.trendmicro.com/solution/000289230
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.