CVE-2021-25252
Medium
Description
Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.
SeverityMedium
CVSS5.5
Exploit probability—
ProductTrendmicro Apex Central
PublishedMar 3, 2021
First seenMar 3, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro apex_central | 2019 | — |
| trendmicro apex_one | 2019, No range specified | — |
| trendmicro cloud_edge | 5.0 | — |
| trendmicro deep_security | 10.0, 11.0, 12.0, 20.0 | — |
| trendmicro control_manager | 7.0 | — |
| trendmicro deep_discovery_analyzer | 5.1 | — |
| trendmicro deep_discovery_email_inspector | 2.5 | — |
| trendmicro deep_discovery_inspector | 3.8 | — |
| trendmicro interscan_messaging_security_virtual_appliance | 9.1 | — |
| trendmicro interscan_web_security_virtual_appliance | 6.5 | — |
| trendmicro officescan | No range specified | — |
| trendmicro portal_protect | 2.6 | — |
| trendmicro scanmail | 14.0 | — |
| trendmicro scanmail_for_ibm_domino | 5.8 | — |
| trendmicro serverprotect_for_storage | 6.0 | — |
| trendmicro serverprotect | 5.8 | — |
| trendmicro serverprotect_for_network_appliance_filers | 5.8 | — |
| trendmicro safe_lock | 1.1 | — |
| trendmicro worry-free_business_security | 10.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.