Trend Micro ServerProtect 6.0/5.8 Information Server uses a static credential to perform authentication when a specific command is typed in the console. An unauthenticated remote attacker with access to the Information Server could exploit this to register to the server and perform authenticated actions.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-25329
• https://success.trendmicro.com/solution/000290507
• https://www.tenable.com/security/research/tra-2022-05