CVE-2021-25237: 
Trend Micro Apex One Agent vulnerability analysis and mitigation

An improper access control vulnerability was discovered in Trend Micro Apex One (on-prem), identified as CVE-2021-25237. The vulnerability was reported on August 19, 2020, and publicly disclosed on January 29, 2021. This security flaw could allow an unauthenticated user to obtain information about the managing port used by agents (ZDI Advisory, NVD).

The vulnerability exists within the web console, which by default listens on TCP port 4343. The issue stems from improper access control implementation. The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating network accessibility, low attack complexity, and no requirements for privileges or user interaction (ZDI Advisory, NVD).

An attacker can leverage this vulnerability to disclose sensitive information from the application, specifically information about the managing port used by agents. The impact is limited to information disclosure with no direct impact on integrity or availability (ZDI Advisory).

The vulnerability can be exploited remotely, and no authentication is required to exploit this vulnerability. The attack complexity is considered low, making it relatively straightforward for attackers to exploit (ZDI Advisory).

Trend Micro has issued an update to correct this vulnerability. Users are advised to apply the security patch available through the vendor's solution portal (ZDI Advisory).