CVE-2022-25331: High severity trend micro serverprotect for emc vulnerability

Published Feb 24, 2022

Updated

Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process.

Affected Software

6 affected components

trendmicro Serverprotect Emc=5.8

trendmicro Serverprotect Netware=5.8

trendmicro Serverprotect Windows=5.8

trendmicro Serverprotect For Network Appliance Filer=5.8

trendmicro Serverprotect For Storage=6.0

Microsoft Windows

Remediation

Patch Available

https://success.trendmicro.com/solution/000290507

Event History

Feb 24, 2022

CVE Published

via MITRE·02:45 AM

Data Sourced

via MITRE·02:45 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-25331?

CVE-2022-25331 refers to the vulnerability in Trend Micro ServerProtection 6.0/5.8 Information Server that can allow a remote attacker to crash the process.

How severe is CVE-2022-25331?

CVE-2022-25331 has a severity rating of 7.5 (high).

Which software versions are affected by CVE-2022-25331?

CVE-2022-25331 affects Trend Micro ServerProtection versions 5.8 and 6.0.

How can a remote attacker exploit CVE-2022-25331?

A remote attacker can exploit CVE-2022-25331 to crash the process in Trend Micro ServerProtection 6.0/5.8 Information Server.

Where can I find more information about CVE-2022-25331?

More information about CVE-2022-25331 can be found at the following references: [Link 1](https://success.trendmicro.com/solution/000290507), [Link 2](https://www.tenable.com/security/research/tra-2022-05).