CVEvulnerability
CVE-2025-49216
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-477
Description
An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product configurations on affected installations.
Affected configurations
• trendmicro trend micro endpoint encryption (< 6.0.0.4013)
Related
Weakness · CWE (1)
- CWE-477 Use of Obsolete Function weakness
References
- https://success.trendmicro.com/en-US/solution/KA-0019928 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-25-373/ Third Party Advisory