CVE-2021-25251
Summary
| CVE | CVE-2021-25251 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-10 22:15:00 UTC |
| Updated | 2021-02-16 22:15:00 UTC |
| Description | The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability. |
Risk And Classification
Problem Types: CWE-94
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Operating System | Microsoft | Windows | - | All | All | All |
| Application | Trendmicro | Antivirus Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Antivirus Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Antivirus Security 2021 | 17.0 | All | All | All |
| Application | Trendmicro | Antivirus Security 2021 | 17.0 | All | All | All |
| Application | Trendmicro | Internet Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Internet Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Internet Security 2021 | 17.0 | All | All | All |
| Application | Trendmicro | Internet Security 2021 | 17.0 | All | All | All |
| Application | Trendmicro | Maximum Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Maximum Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Maximum Security 2021 | 17.0 | All | All | All |
| Application | Trendmicro | Maximum Security 2021 | 17.0 | All | All | All |
| Application | Trendmicro | Premium Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Premium Security 2020 | 16.0 | All | All | All |
| Application | Trendmicro | Premium Security 2021 | 17.0 | All | All | All |
| Application | Trendmicro | Premium Security 2021 | 17.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Bulletin: Trend Micro Security (Consumer) Code Injection Vulnerability · Trend Micro for Home | N/A | helpcenter.trendmicro.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.