What is the CVSS score of EUVD-2025-21042?

EUVD-2025-21042 has a CVSS 3.1 base score of 7.6 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H. EPSS exploitation probability: 0.1%.

Which versions of Trend Micro are affected by EUVD-2025-21042?

Trend Micro Worry-Free Business Security Services (WFBSS) SaaS contains a missing authentication vulnerability (CVE-2025-53378) that allows unauthenticated attackers to compromise cloud-based agents…. A patch is available.

How to fix or mitigate EUVD-2025-21042?

Within 24 hours: Verify your WFBSS deployment model (SaaS cloud-based vs. on-premises) and confirm enrollment in Trend Micro's automatic update schedule. Within 7 days: If on-premises or non-standard deployments exist, contact Trend Micro to obtain and validate the monthly maintenance patch version. Within 30 days: Conduct endpoint audit to identify any WFBSS SaaS agents that may have been compromised prior to patch deployment, and review agent activity logs during the vulnerability window.

Trend Micro EUVD-2025-21042

| CVE-2025-53378 HIGH

Missing Authentication for Critical Function (CWE-306)

2025-07-10 security@trendmicro.com

Authentication Bypass Trend Micro RCE Worry Free Business Security Services

7.6

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.6 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:28 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

6.7.3954

EUVD ID Assigned

Mar 16, 2026 - 06:52 euvd

EUVD-2025-21042

Analysis Generated

Mar 16, 2026 - 06:52 vuln.today

CVE Published

Jul 10, 2025 - 19:15 nvd

HIGH 7.6

DescriptionCVE.org

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations.

Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.

AnalysisAI

CVE-2025-53378 is a missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) SaaS agent that allows unauthenticated remote attackers to take control of affected agents with user interaction required. The vulnerability has a CVSS score of 7.6 (High) and affects only the cloud-based SaaS version of WFBSS, not on-premises deployments. Trend Micro has addressed this issue through a monthly maintenance update, and affected customers on the regular SaaS deployment schedule are automatically patched; no additional customer action is required for remediation.

Technical ContextAI

The vulnerability stems from CWE-306 (Missing Authentication for Critical Function), indicating that the WFBSS SaaS agent fails to properly authenticate requests before processing critical control operations. This authentication bypass likely exists in the agent's communication protocol or API endpoints used for remote management and control. The SaaS architecture introduces network-accessible endpoints that are subject to authentication validation in ways that on-premises deployments may not be, explaining why only the SaaS client version is affected. The agent's susceptibility to unauthenticated remote takeover suggests missing or improperly implemented authentication mechanisms in inter-process communication, API handlers, or remote procedure call (RPC) interfaces used for agent management and policy distribution.

RemediationAI

For SaaS Deployments (Primary Mitigation): No action required for customers maintaining standard SaaS deployment schedules—Trend Micro automatically deploys monthly maintenance updates to the SaaS infrastructure. Verify that WFBSS agents are configured to receive automatic updates from Trend Micro's cloud service. For organizations with update deferral policies: Enable automatic monthly maintenance updates or manually trigger deployment of the latest WFBSS monthly maintenance release to all agents. On-Premises Deployments: No remediation required as on-premises Worry-Free Business Security versions are not affected. Verify your deployment model (SaaS vs. on-premises) in your Trend Micro console or contact Trend Micro support for specific patch version details and deployment confirmation. Consult Trend Micro's official security advisory for the exact maintenance update version number and any supplementary guidance.