Vulnerability · Published Sep 29, 2021 · Assigned by trendmicro

CVE-2021-36745

Critical 9.8

In plain English

A critical-severity security flaw in Trend Micro ServerProtect for EMC Celerra from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 9.4% (higher than 95% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical

Exploit odds (30 days)9.4%top 4.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.

Affected products (as reported)

Vendor	Product	Versions
Trend Micro	Trend Micro ServerProtect for Storage	6.0
Trend Micro	Trend Micro ServerProtect for EMC Celerra	5.8
Trend Micro	Trend Micro ServerProtect for Network Appliance Filers	5.8
Trend Micro	Trend Micro ServerProtect for Microsoft Windows / Novell Netware	5.8

References

https://success.trendmicro.com/solution/000289038 x_refsource_MISC
https://success.trendmicro.com/jp/solution/000289030 x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-1115/ x_refsource_MISC