9.8Kritisch
CVE-2025-49216
Beschreibung
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.
Schwachstellentyp (CWE):
CWE-477
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Trend Micro, Inc. | Trend Micro Endpoint Encryption Policy Server | 6.0 – < 6.0.0.4013 | |
| trendmicro | endpoint encryption policy server | 6.0.0.4013 | |
| trendmicro | trend micro endpoint encryption | < 6.0.0.4013 |
Referenzen und Patches
- https://success.trendmicro.com/en-US/solution/KA-0019928 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-25-373/ Third Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:trendmicro:trend_micro_endpoint_encryption:*:*:*:*:*:*:*:*< 6.0.0.4013