Resource exhaustion in Trend Micro products - CVE-2021-25252
Published: March 2, 2021 / Updated: March 3, 2021
Vulnerability identifier: #VU51109
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-25252
CWE-ID: CWE-400
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources within Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) features. A remote attacker can pass specially crafted file to the application, trigger resource exhaustion and perform a denial of service (DoS) attack.
Affected software
Apex One
OfficeScan
InterScan Web Security Virtual Appliance (IWSVA)
InterScan Messaging Security Virtual Appliance
Deep Security
OfficeScan
InterScan Web Security Virtual Appliance (IWSVA)
InterScan Messaging Security Virtual Appliance
Deep Security
How to mitigate CVE-2021-25252
Install updates from vendor's website.
Apex One - update to CP 9167
OfficeScan - update to XG SP1 CP6040
InterScan Web Security Virtual Appliance (IWSVA) - update to 6.5 CP1926
InterScan Messaging Security Virtual Appliance - update to 9.1 CP2034
Deep Security - addressed in versions 10.0 U29, 11.0 U25, 12.0 U15, 20.0 LTS
OfficeScan - update to XG SP1 CP6040
InterScan Web Security Virtual Appliance (IWSVA) - update to 6.5 CP1926
InterScan Messaging Security Virtual Appliance - update to 9.1 CP2034
Deep Security - addressed in versions 10.0 U29, 11.0 U25, 12.0 U15, 20.0 LTS