CVE-2021-36745 Auth bypass in Trend Micro ServerProtect for EMC Celerra
Remote attackers can bypass authentication on Trend Micro ServerProtect installations, potentially gaining unauthorized access to the security management interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-36745?
CVE-2021-36745 is a critical authentication bypass vulnerability in Trend Micro ServerProtect for EMC Celerra, published on 29 Sep 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.
Weakness: CWE-425
Which versions are affected by CVE-2021-36745?
It affects 1 product.
Products include Trendmicro Serverprotect.
How do I fix CVE-2021-36745?
No fix has been published for CVE-2021-36745 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-36745 being exploited?
There is no known exploitation of CVE-2021-36745 in the wild and no public exploit code.
Other vulnerabilities in Trend Micro ServerProtect for EMC Celerra
- CVE-2022-25329 Hardcoded credentials in Trend Micro ServerProtect for EMC Celerra
- CVE-2022-25330 Integer overflow in Trend Micro ServerProtect for EMC Celerra
- CVE-2017-9034 Code injection in n/a
- CVE-2020-24561 Command injection in Trend Micro ServerProtect for Linux
- CVE-2017-9033 Cross-site request forgery in n/a
Sources
Also known as GHSA-324m-7g42-gmmr.