CVE-2022-25330

2022-02-2402:45:22

trendmicro

www.cve.org

integer overflow

trend micro

serverprotect

remote attacker

crash

remote code execution

AI Score

Confidence

High

EPSS

0.009

Percentile

83.0%

JSON

Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.

CNA Affected

[
  {
    "product": "Trend Micro ServerProtect for Storage",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "6.0"
      }
    ]
  },
  {
    "product": "Trend Micro ServerProtect for Microsoft Windows / Novell NetWare",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "5.8"
      }
    ]
  },
  {
    "product": "Trend Micro ServerProtect for EMC Celerra",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "5.8"
      }
    ]
  },
  {
    "product": "Trend Micro ServerProtect for Network Appliance Filers",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "5.8"
      }
    ]
  }
]

References

success.trendmicro.com/solution/000290507

www.tenable.com/security/research/tra-2022-05