Serverprotect vulnerabilities

2 known vulnerabilities in Serverprotect from Trend Micro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Trend Micro ServerProtect for Storage: Integer Overflow or Wraparound

  CVE-2022-25330Feb 24, 2022Trend MicroEPSS 5.2%

  Integer overflow conditions that exist in Trend Micro ServerProtect 6.0/5.8 Information Server could allow a remote attacker to crash the process or achieve remote code execution.

• 9.8 Critical severity

  Trend Micro ServerProtect for Storage: Use of Hard-coded Credentials

  CVE-2022-25329Feb 24, 2022Trend MicroEPSS 2.69%

  Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to