CVE-2022-25330

9.8CRITICAL

Key Information:

Vendor
Trend Micro
Status
Trend Micro Serverprotect For Storage
Trend Micro Serverprotect For Microsoft Windows / Novell Netware
Trend Micro Serverprotect For Emc Celerra
Trend Micro Serverprotect For Network Appliance Filers
Vendor
CVE Published:
24 February 2022

Summary

Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.

Affected Version(s)

Trend Micro ServerProtect for EMC Celerra 5.8

Trend Micro ServerProtect for Microsoft Windows / Novell NetWare 5.8

Trend Micro ServerProtect for Network Appliance Filers 5.8

References

https://success.trendmicro.com/solution/000290507
x_refsource_MISC
https://www.tenable.com/security/research/tra-2022-05
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.