VULNERABILITY INTELLIGENCE

CVE-2022-25329

CVSS score9.8 CRITICAL

EPSS probability2.69%

CISA KEVNot currently listed

Published2022-02-24

Last modified2026-06-17

Description

Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.