Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Trend Micro Endpoint Encryption PolicyServer: Remote Code Execution via Malformed Data

CVE-2025-49217 · published 1 year ago
Summary

The Trend Micro Endpoint Encryption PolicyServer may allow an attacker to execute malicious code on affected systems without needing a login. This is a potential security risk because an attacker could gain unauthorized access to sensitive data. To protect against this vulnerability, update the PolicyServer to the latest version.

What to do
  • Update trendmicro trend_micro_endpoint_encryption to version 6.0.0.4013 or later.
Affected software
VendorProductAffected versions
trendmicro trend_micro_endpoint_encryption < 6.0.0.4013
cpe:2.3:a:trendmicro:trend_micro_endpoint_encryption:*:*:*:*:*:*:*:*
Original advisory text
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerab...
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note that this vulnerability is similar to CVE-2025-49213 but is in a different method.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
9.8 Critical
Exploitation
1% chance of attack within 30 days
Type
CWE-477Use of Obsolete Function
CWE-502Deserialization of Untrusted Data
Timeline
Published17 Jun 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-49217 · NVD
Track software like this
Free during beta