CVE-2021-36745

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@trendmicro.com

Published

2021-09-29

Last modified

2024-08-04

Weaknesses

CWE-425

Affected products

• Trend Micro Serverprotect For Emc Celerra (Trend Micro)
• Trend Micro Serverprotect For Microsoft Windows Novell Netware (Trend Micro)
• Trend Micro Serverprotect For Network Appliance Filers (Trend Micro)
• Trend Micro Serverprotect For Storage (Trend Micro)
• Serverprotect (Trendmicro)

References

• https://success.trendmicro.com/jp/solution/000289030
• https://success.trendmicro.com/solution/000289038
• https://www.zerodayinitiative.com/advisories/ZDI-21-1115/