{"schemaVersion":3,"id":"CVE-2022-25330","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.","dates":{"published":"2022-02-24T02:45:22.000Z","modified":"2024-08-03T04:36:06.908Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05198,"percentile":0.92399,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.05198},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05198,"percentile":0.92399}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05198,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.05198,"percentile":0.92399}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_A41908E280C76951","name":"Exploit Reference (tenable.com)","source":"reference","url":"https://www.tenable.com/security/research/tra-2022-05","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"trend micro","product":"trend micro serverprotect for emc celerra","name":"Trend Micro ServerProtect for EMC Celerra","label":"trend micro serverprotect for emc celerra","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.8","eol":null,"hubHref":"/vendor/trend_micro/trend_micro_serverprotect_for_emc_celerra"},{"vendor":"trend micro","product":"trend micro serverprotect for microsoft windows / novell netware","name":"Trend Micro ServerProtect for Microsoft Windows / Novell NetWare","label":"trend micro serverprotect for microsoft windows / novell netware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.8","eol":null,"hubHref":"/vendor/trend_micro/trend_micro_serverprotect_for_microsoft_windows__novell_netware"},{"vendor":"trend micro","product":"trend micro serverprotect for network appliance filers","name":"Trend Micro ServerProtect for Network Appliance Filers","label":"trend micro serverprotect for network appliance filers","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.8","eol":null,"hubHref":"/vendor/trend_micro/trend_micro_serverprotect_for_network_appliance_filers"},{"vendor":"trend micro","product":"trend micro serverprotect for storage","name":"Trend Micro ServerProtect for Storage","label":"trend micro serverprotect for storage","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/trend_micro/trend_micro_serverprotect_for_storage"},{"vendor":"trendmicro","product":"serverprotect","name":"serverprotect","label":"serverprotect","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.8","eol":null,"hubHref":"/vendor/trendmicro/serverprotect"},{"vendor":"trendmicro","product":"serverprotect_for_network_appliance_filer","name":"serverprotect for network appliance filer","label":"serverprotect_for_network_appliance_filer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.8","eol":null,"hubHref":"/vendor/trendmicro/serverprotect_for_network_appliance_filer"},{"vendor":"trendmicro","product":"serverprotect_for_storage","name":"serverprotect for storage","label":"serverprotect_for_storage","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/trendmicro/serverprotect_for_storage"}],"affectedCount":7,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://success.trendmicro.com/solution/000290507","label":"success.trendmicro.com/solution/000290507","hostname":"success.trendmicro.com","tags":["X Refsource MISC","Patch","Vendor Advisory"]},{"url":"https://www.tenable.com/security/research/tra-2022-05","label":"www.tenable.com/security/research/tra-2022-05","hostname":"www.tenable.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-02-24T02:45:22.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-03T04:36:06.908Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:16:17.536Z","stale":false,"partial":false}}