CVE-2025-49214: trend micro, inc. trend micro endpoint encryption policy server Use of Obsolete Function
Vulnerability summary
CVE-2025-49214 is a high (CVSS 8.8) Use of Obsolete Function vulnerability in trend micro, inc. trend micro endpoint encryption policy server. EPSS estimates a 0.84% chance of exploitation in the next 30 days, higher than 57.1% of scored vulnerabilities.
Timeline
- 17-06-2025PublishedVulnerability first disclosed.
- 18-06-2025Last modifiedVulnerability information updated.
Description
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.84%
Chance of exploitation in the next 30 days
Percentile
57%
Versus all other CVEs
30-day change
0.00 pp
From 0.84% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-477Use of Obsolete FunctionThe code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.
- CWE-502Deserialization of Untrusted DataThe product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Affected systems
Trend micro, inc.1 product
- trend micro endpoint encryption policy server≥ 6.0, < 6.0.0.4013
Trendmicro1 product
- trend_micro_endpoint_encryption< 6.0.0.4013
2 vendors · 2 products
References
2 links- success.trendmicro.com/en-US/solution/KA-0019928Vendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-25-371/Third Party Advisory