Vulnerability Details CVE-2021-25251
The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 73.8%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
References
Products affected by CVE-2021-25251
-
cpe:2.3:a:trendmicro:antivirus+_security_2020:16.0
-
cpe:2.3:a:trendmicro:antivirus+_security_2021:17.0
-
cpe:2.3:a:trendmicro:internet_security_2020:16.0
-
cpe:2.3:a:trendmicro:internet_security_2021:17.0
-
cpe:2.3:a:trendmicro:maximum_security_2020:16.0
-
cpe:2.3:a:trendmicro:maximum_security_2021:17.0
-
cpe:2.3:a:trendmicro:premium_security_2020:16.0
-
cpe:2.3:a:trendmicro:premium_security_2021:17.0
-
cpe:2.3:o:microsoft:windows:-