High severity · published Dec 16, 2021
CVE-2021-44023
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup…
7.1
CVSS
0.4%
EPSS
No
On KEV
Description
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Antivirus+ Security 2021 · Trendmicro
through 17.0 · source: NVD
IS
Internet Security 2021 · Trendmicro
through 17.0 · source: NVD
MS
Maximum Security 2021 · Trendmicro
through 17.0 · source: NVD
PS
Premium Security 2021 · Trendmicro
through 17.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-44023
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-44023
Vendor Advisory
https://helpcenter.trendmicro.com/en-us/article/tmka-10867
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1536/
More from Antivirus+ Security 2021
7.8
CVE-2023-28929
Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable file as an…
7.2
CVE-2021-25251
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's…