HIGH · 7.2

CVE-2021-25251

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and dis...

Vulnerability Description

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
TrendmicroAntivirus\+ Security 202016.0
TrendmicroAntivirus\+ Security 202117.0
TrendmicroInternet Security 202016.0
TrendmicroInternet Security 202117.0
TrendmicroMaximum Security 202016.0
TrendmicroMaximum Security 202117.0
TrendmicroPremium Security 202016.0
TrendmicroPremium Security 202117.0
MicrosoftWindows-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2021-25251?

CVE-2021-25251 is a vulnerability with a CVSS score of 7.2 (HIGH). The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and dis...

How severe is CVE-2021-25251?

CVE-2021-25251 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-25251?

Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Antivirus\+ Security 2020, Trendmicro Antivirus\+ Security 2021, Trendmicro Internet Security 2020, Trendmicro Internet Security 2021, Trendmicro Maximum Security 2020.