Denial-of-Service Vulnerability in Trend Micro Security Products
CVE-2021-44023

7.1HIGH

Key Information:

Vendor

Trend Micro
Status
Trend Micro Security (consumer)
Vendor
CVE Published:
16 December 2021

What is CVE-2021-44023?

A vulnerability exists in the Trend Micro Security (Consumer) 2021 product family that can be exploited through the PC Health Checkup feature. An attacker may leverage this vulnerability to create symbolic links, which can lead to unauthorized file modifications. Such modifications can disrupt the normal function of the software, potentially resulting in a denial-of-service scenario. It's crucial for users to remain vigilant and apply any security updates provided by Trend Micro to mitigate the associated risks.

Affected Version(s)

Trend Micro Security (Consumer) 2021 (v17)

References

https://helpcenter.trendmicro.com/en-us/article/tmka-10867
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-1536/
x_refsource_MISC

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.