7.1
CVE-2021-44023
- EPSS 0.21%
- Published 16.12.2021 03:15:10
- Last modified 21.11.2024 06:30:14
- Source security@trendmicro.com
- Teams watchlist Login
- Open Login
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modification of files which could lead to a denial-of-service.
Data is provided by the National Vulnerability Database (NVD)
Trendmicro ≫ Antivirus+ Security 2021 Version <= 17.0
Trendmicro ≫ Internet Security 2021 Version <= 17.0
Trendmicro ≫ Maximum Security 2021 Version <= 17.0
Trendmicro ≫ Premium Security 2021 Version <= 17.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.21% | 0.409 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
|
| nvd@nist.gov | 3.6 | 3.9 | 4.9 |
AV:L/AC:L/Au:N/C:N/I:P/A:P
|
CWE-59 Improper Link Resolution Before File Access ('Link Following')
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.