CVE-2022-25331

3 documents3 sources
Severity
7.5HIGH
EPSS
1.1%
top 22.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Trend Micro Trend Micro Serverprotect FOR EMC CelerraTrend Micro Trend Micro Serverprotect FOR Microsoft Windows / Novell NetwareTrend Micro Trend Micro Serverprotect FOR Network Appliance Filers+4 more
Timeline
PublishedFeb 24
Latest updateFeb 25

Description

Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages5 packages

▶NVDtrendmicro/serverprotect5.8, 6.0+1

Patches

Patch: success.trendmicro.com ↗Patch: success.trendmicro.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-r972-cxj5-p95x: Uncaught exceptions that can be generated in Trend Micro ServerProtection 6↗2022-02-25
▶
CVEList
CVE-2022-25331: Uncaught exceptions that can be generated in Trend Micro ServerProtection 6↗2022-02-24
▶
CVE-2022-25331 (HIGH CVSS 7.5) | Uncaught exceptions that can be gen | cvebase.io