Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-25251

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

Published

2021-02-10T22:15:13.703

Last Modified

2024-11-21T05:54:37.997

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-94
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application trendmicro antivirus\+_security_2020 16.0 Yes
Application trendmicro antivirus\+_security_2021 17.0 Yes
Application trendmicro internet_security_2020 16.0 Yes
Application trendmicro internet_security_2021 17.0 Yes
Application trendmicro maximum_security_2020 16.0 Yes
Application trendmicro maximum_security_2021 17.0 Yes
Application trendmicro premium_security_2020 16.0 Yes
Application trendmicro premium_security_2021 17.0 Yes
Operating System microsoft windows - No
References