CVE-2021-36745 : What You Need to Know

A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8 could allow a remote attacker to bypass authentication on affected installations.

Understanding CVE-2021-36745

This CVE details a security vulnerability in multiple Trend Micro ServerProtect products that could lead to authentication bypass.

What is CVE-2021-36745?

The CVE-2021-36745 vulnerability impacts Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Windows / Novell Netware 5.8, allowing remote attackers to bypass authentication.

The Impact of CVE-2021-36745

The vulnerability poses a significant risk, enabling unauthorized remote access to affected systems, potentially leading to further exploitation and data breaches.

Technical Details of CVE-2021-36745

This section outlines the specific technical information regarding the CVE-2021-36745 vulnerability.

Vulnerability Description

The vulnerability allows remote attackers to bypass authentication on the affected Trend Micro ServerProtect installations, granting unauthorized access to sensitive systems.

Affected Systems and Versions

The following Trend Micro ServerProtect products and versions are affected:

Trend Micro ServerProtect for Storage 6.0
Trend Micro ServerProtect for EMC Celerra 5.8
Trend Micro ServerProtect for Network Appliance Filers 5.8
Trend Micro ServerProtect for Microsoft Windows / Novell Netware 5.8

Exploitation Mechanism

Attackers can exploit this vulnerability remotely to gain unauthorized access to vulnerable systems by bypassing the authentication processes.

Mitigation and Prevention

To address and prevent the CVE-2021-36745 vulnerability, users and organizations should take the following immediate and long-term measures.

Immediate Steps to Take

Update Trend Micro ServerProtect products to the latest non-vulnerable versions or apply patches provided by the vendor.
Implement strong firewall rules and access controls to restrict unauthorized access to critical systems.

Long-Term Security Practices

Regularly monitor security advisories and updates from Trend Micro to stay informed about other potential vulnerabilities.
Conduct regular security audits and penetration testing to identify and remediate security gaps proactively.

Patching and Updates

Ensure timely installation of security patches and updates for Trend Micro ServerProtect products to mitigate the risk of exploitation and enhance system security.