Vulnerability · Published Feb 4, 2021 · Assigned by trendmicro
CVE-2021-25244
Medium 5.3
In plain English
A medium-severity security flaw in Trend Micro Worry-Free Business Security from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 75% of all known vulnerabilities).
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)1.5%top 24.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of configuration informaiton.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro Worry-Free Business Security | 10.0 SP1 |
References
- https://success.trendmicro.com/solution/000284206 x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-21-123/ x_refsource_MISC