← Database

CVE-2022-25329

CRITICAL CVSS: 9.8 Published: 2022-02-24 Modified: 2026-06-17

Description

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.

Affected Platforms

Microsoft WindowsTrendmicro Serverprotect For StorageTrendmicro Serverprotect For Network Appliance FilerTrendmicro Serverprotect

Weakness Type

CWE-798

References