by Kastro
Paper/Archive/CVE-2021-36745

CVE-2021-36745

Trend Micro Trend Micro ServerProtect for Storage — A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance File…

EPSS 9%CVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 95.4.954 × 2019.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.

Affected

ProductAffectedFixed inSource
Trend Micro ServerProtect for Storage6.0–CNA
Trend Micro ServerProtect for EMC Celerra5.8–CNA
Trend Micro ServerProtect for Network Appliance Filers5.8–CNA
Trend Micro ServerProtect for Microsoft Windows / Novell Netware5.8–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsuccess.trendmicro.com/solution/000289038refsuccess.trendmicro.com/jp/solution/000289030refzerodayinitiative.com/advisories/ZDI-21-1115