CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-36742

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.3%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 4.6

Proposed Action

Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security contain an improper input validation vulnerability that allows for privilege escalation.

Ransomware Campaign

Unknown

References

Products affected by CVE-2021-36742

Trendmicro » Apex One » Version: 2019

cpe:2.3:a:trendmicro:apex_one:2019
Trendmicro » Officescan » Version: xg

cpe:2.3:a:trendmicro:officescan:xg
Trendmicro » Officescan Business Security » Version: 10.0

cpe:2.3:a:trendmicro:officescan_business_security:10.0
Trendmicro » Worry-Free Business Security » Version: 10.0

cpe:2.3:a:trendmicro:worry-free_business_security:10.0
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-36742

Products

Pricing

Contact Us