Trendmicro Cloud Edge vulnerabilities

2 known vulnerabilities affecting trendmicro/cloud_edge.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-48904CRITICALCVSS 9.8≥ 5.6, < 5.6.3228≥ 7.0, < 7.0.10812024-10-22

CVE-2024-48904 [CRITICAL] CWE-77 CVE-2024-48904: An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execut An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances. Please note: authentication is not required in order to exploit this vulnerability.

CVE-2021-25252MEDIUMCVSS 5.5v5.02021-03-03

CVE-2021-25252 [MEDIUM] CWE-400 CVE-2021-25252: Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a me Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.