Trend Micro · Trend Micro Serverprotect For Storage · CVE-2021-36745
**Name of the Vulnerable Software and Affected Versions**
Trend Micro ServerProtect for Storage version 6.0
Trend Micro ServerProtect for EMC Celerra version 5.8
Trend Micro ServerProtect for Network Appliance Filers version 5.8
Trend Micro ServerProtect for Microsoft Windows / Novell Netware version 5.8
**Description**
A vulnerability in Trend Micro ServerProtect could allow a remote attacker to bypass authentication on affected installations. The issue is related to deficiencies in the authentication mechanism, which may enable an attacker to bypass authentication and gain unauthorized access to protected information. The vulnerability affects Trend Micro's enterprise-level real-time malware detection solution, which is designed to protect servers from malware and automate security operations.
**Recommendations**
For Trend Micro ServerProtect for Storage version 6.0, update to the latest build as soon as possible.
For Trend Micro ServerProtect for EMC Celerra version 5.8, update to the latest build as soon as possible.
For Trend Micro ServerProtect for Network Appliance Filers version 5.8, update to the latest build as soon as possible.
For Trend Micro ServerProtect for Microsoft Windows / Novell Netware version 5.8, update to the latest build as soon as possible.
As a temporary workaround, consider restricting access to the vulnerable installations to minimize the risk of exploitation.