CVE-2022-25331

HIGH

Trend Micro ServerProtection <6.0/<5.8 - DoS

Title source: llm
STIX 2.1

Description

Uncaught exceptions that can be generated in Trend Micro ServerProtection 6.0/5.8 Information Server could allow a remote attacker to crash the process.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_misc
https://success.trendmicro.com/solution/000290507
Exploit, Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2022-05

Scores

CVSS v3 7.5
EPSS 0.0109
EPSS Percentile 78.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (3)
trendmicro/serverprotect 5.8 (3 CPE variants)
trendmicro/serverprotect_for_network_appliance_filer 5.8
trendmicro/serverprotect_for_storage 6.0
Published Feb 24, 2022
Tracked Since Feb 18, 2026