CVE-2021-36742 - A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations

Back Back to CVE browser

HIGH KEV

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations

Published Jul 29, 2021 ·Due Nov 17, 2021

7.8

HIGH

CVSS 3.1

EPSS 1.48%

Description

A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.

Affected products

Vendor Trend Micro Product Trend Micro Apex One Default
n/a
- Version
  2019, SaaS
  Status
  affected
  Constraints
  -
Vendor Trend Micro Product Trend Micro OfficeScan Default
n/a
- Version
  XG SP1
  Status
  affected
  Constraints
  -
Vendor Trend Micro Product Trend Micro Worry-Free Business Security Default
n/a
- Version
  10.0 SP1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro

Trend Micro Apex One

n/a

Version	Status	Constraints
2019, SaaS	affected	-

Trend Micro

Trend Micro OfficeScan

n/a

Version	Status	Constraints
XG SP1	affected	-

Trend Micro

Trend Micro Worry-Free Business Security

n/a

Version	Status	Constraints
10.0 SP1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23332
Advisory
https://success.trendmicro.com/jp/solution/000287796
x_refsource_MISCVendor Advisory
https://success.trendmicro.com/jp/solution/000287815
x_refsource_MISCVendor Advisory
https://success.trendmicro.com/solution/000287819
x_refsource_MISCVendor Advisory
https://success.trendmicro.com/solution/000287820
x_refsource_MISCVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36742
government-resourceUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-23332		Advisory
https://success.trendmicro.com/jp/solution/000287796		x_refsource_MISCVendor Advisory
https://success.trendmicro.com/jp/solution/000287815		x_refsource_MISCVendor Advisory
https://success.trendmicro.com/solution/000287819		x_refsource_MISCVendor Advisory
https://success.trendmicro.com/solution/000287820		x_refsource_MISCVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36742		government-resourceUS Government Resource