CVE-2022-25329: Critical severity trend micro serverprotect for emc vulnerability

Published Feb 24, 2022

Updated

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.

Affected Software

6 affected components

trendmicro Serverprotect Emc=5.8

trendmicro Serverprotect Netware=5.8

trendmicro Serverprotect Windows=5.8

trendmicro Serverprotect For Network Appliance Filer=5.8

trendmicro Serverprotect For Storage=6.0

Microsoft Windows

Remediation

Patch Available

https://success.trendmicro.com/solution/000290507

Event History

Feb 24, 2022

CVE Published

via MITRE·02:45 AM

Data Sourced

via MITRE·02:45 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability CVE-2022-25329?

CVE-2022-25329 is a critical vulnerability in Trend Micro ServerProtect 6.0/5.8 Information Server that allows an unauthenticated remote attacker to register to the server and perform authenticated actions.

How does CVE-2022-25329 exploit the vulnerability?

CVE-2022-25329 exploits the use of a static credential by an unauthenticated remote attacker who has access to the Information Server.

What is the severity of CVE-2022-25329?

CVE-2022-25329 has a severity rating of 9.8 (critical).

Which software versions are affected by CVE-2022-25329?

Trend Micro ServerProtect 6.0 and 5.8, as well as Trend Micro ServerProtect for Network Appliance Filer 5.8 and Trend Micro ServerProtect for Storage 6.0, are affected by CVE-2022-25329.

How can I fix CVE-2022-25329?

Apply the necessary security patches provided by Trend Micro ServerProtect to fix CVE-2022-25329.