« Back to list

CVE-2021-25251

Status: ModifiedHigh (7.2)—

The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (8)

Trendmicro — Antivirus+ Security 2020Trendmicro — Antivirus+ Security 2021Trendmicro — Internet Security 2020Trendmicro — Internet Security 2021Trendmicro — Maximum Security 2020Trendmicro — Maximum Security 2021Trendmicro — Premium Security 2020Trendmicro — Premium Security 2021

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2021-25251",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "security@trendmicro.com",
      "affectedData": [
        {
          "vendor": "Trend Micro",
          "product": "Trend Micro Security (Consumer)",
          "versions": [
            {
              "status": "affected",
              "version": "2020 (v16), 2021 (v17)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-02-10T22:15:13.703",
  "references": [
    {
      "url": "https://helpcenter.trendmicro.com/en-us/article/TMKA-10211",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@trendmicro.com"
    },
    {
      "url": "https://helpcenter.trendmicro.com/en-us/article/TMKA-10211",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability."
    },
    {
      "lang": "es",
      "value": "Las familias de productos de consumo Trend Micro Security 2020 y 2021, son vulnerables a una vulnerabilidad de inyección de código que podría permitir a un atacante desactivar la protección con contraseña del programa y desactivar la protección. Un atacante ya debe tener privilegios de administrador en la máquina para explotar esta vulnerabilidad"
    }
  ],
  "lastModified": "2026-06-17T03:41:43.197",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trendmicro:antivirus\\+_security_2020:16.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35B16D47-D892-4407-B413-C53604E54DCD"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:antivirus\\+_security_2021:17.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCB376CE-FD04-446D-BDFB-DD30C5277E5C"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:internet_security_2020:16.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87EC00B5-27FD-495A-A810-4B5B7B542E84"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:internet_security_2021:17.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F54EDFC-AA74-4407-92AF-BE5A2E9EB8A5"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:maximum_security_2020:16.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18879524-F7E4-4FB2-83F1-9C12FC973358"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:maximum_security_2021:17.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "769EDF57-123C-4FE7-93F3-8B773F5D17C8"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:premium_security_2020:16.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7ADF0773-F24D-4E70-A41F-6834F60A1282"
            },
            {
              "criteria": "cpe:2.3:a:trendmicro:premium_security_2021:17.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D77BEF92-897E-4B1E-8F34-A94E238609E2"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@trendmicro.com"
}