Trendmicro Serverprotect For Storage vulnerabilities
4 vulnerabilities
Known vulnerabilities in Trendmicro Serverprotect For Storage, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-25252trend microtrend micro virus scan api (vsapi) engine+19
EPSS score0.62%
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.CVE-2022-25330trend microtrend micro serverprotect for emc celerra+6EPSS score5.20%
Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.CVE-2022-25329trend microtrend micro serverprotect for emc celerra+6EPSS score2.69%
Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.CVE-2022-25331trend microtrend micro serverprotect for emc celerra+6EPSS score3.10%
Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process.