serverprotect Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/serverprotect/ Sun, 26 Feb 2023 06:40:42 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png serverprotect Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/serverprotect/ 32 32 CVE-2020-28575 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-28575/ Sun, 26 Feb 2023 06:40:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-28575/ A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this vulnerability.

The post CVE-2020-28575 appeared first on CVE Vulnerability.

]]> A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this vulnerability.

The post CVE-2020-28575 appeared first on CVE Vulnerability.

]]> CVE-2020-24561 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-24561/ Sun, 26 Feb 2023 06:39:28 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-24561/ A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileges on the SPLX console to exploit this vulnerability.

The post CVE-2020-24561 appeared first on CVE Vulnerability.

]]> A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileges on the SPLX console to exploit this vulnerability.

The post CVE-2020-24561 appeared first on CVE Vulnerability.

]]> CVE-2021-36745 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-36745/ Thu, 23 Feb 2023 14:10:44 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-36745/ A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.

The post CVE-2021-36745 appeared first on CVE Vulnerability.

]]> A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.

The post CVE-2021-36745 appeared first on CVE Vulnerability.

]]> CVE-2021-25224 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-25224/ Thu, 23 Feb 2023 14:08:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-25224/ A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order […]

The post CVE-2021-25224 appeared first on CVE Vulnerability.

]]> A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-25224 appeared first on CVE Vulnerability.

]]> CVE-2021-25225 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-25225/ Thu, 23 Feb 2023 14:08:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-25225/ A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order […]

The post CVE-2021-25225 appeared first on CVE Vulnerability.

]]> A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-25225 appeared first on CVE Vulnerability.

]]> CVE-2021-25226 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-25226/ Thu, 23 Feb 2023 14:08:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-25226/ A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order […]

The post CVE-2021-25226 appeared first on CVE Vulnerability.

]]> A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

The post CVE-2021-25226 appeared first on CVE Vulnerability.

]]> CVE-2022-25329 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-25329/ Thu, 23 Feb 2023 05:17:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-25329/ Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.

The post CVE-2022-25329 appeared first on CVE Vulnerability.

]]> Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.

The post CVE-2022-25329 appeared first on CVE Vulnerability.

]]> CVE-2022-25330 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-25330/ Thu, 23 Feb 2023 05:17:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-25330/ Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.

The post CVE-2022-25330 appeared first on CVE Vulnerability.

]]> Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.

The post CVE-2022-25330 appeared first on CVE Vulnerability.

]]> CVE-2022-25331 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-25331/ Thu, 23 Feb 2023 05:17:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-25331/ Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process.

The post CVE-2022-25331 appeared first on CVE Vulnerability.

]]> Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process.

The post CVE-2022-25331 appeared first on CVE Vulnerability.

]]>