Login Request a demo
Critical severity · published Feb 24, 2022
CVE-2022-25329
Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console
9.8
CVSS
2.7%
EPSS
No
On KEV
Description
Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Serverprotect · Trendmicro
5.8; 5.8; 5.8 · source: NVD
SF
Serverprotect For Network Appliance Filer · Trendmicro
5.8 · source: NVD
SF
Serverprotect For Storage · Trendmicro
6.0 · source: NVD
Affected product
SE
Serverprotect
Trendmicro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-25329
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-25329
Patch
https://success.trendmicro.com/solution/000290507
Third Party Advisory
https://www.tenable.com/security/research/tra-2022-05
More from Serverprotect
9.8
CVE-2022-25330
Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution
9.8
CVE-2021-36745
A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft…
9.8
CVE-2017-9034
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging…
9.1
CVE-2020-24561
A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system
8.8
CVE-2017-9033
Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for…