Advisory Date: 11 de lutego de 2021

  DESCRIPTION

In the November 2020 Microsoft security patch release, Microsoft updated its vulnerability information page. Following the new patch information format, below are the CVEs that Trend Micro Deep Security covers in the February 2021 release:

  • CVE-2021-24078 - Windows DNS Server Remote Code Execution Vulnerability
    CVSS:3.0 9.8/8.5

  • CVE-2021-24072 - Microsoft SharePoint Server Remote Code Execution Vulnerability
    CVSS:3.0 8.8/7.7

  INFORMATION EXPOSURE

Trend Micro Deep Security shields networks through the following Deep Packet Inspection (DPI) rules. Trend Micro customers using the Vulnerability Protection are also protected from attacks using these vulnerabilities.

Vulnerability ID DPI Rule Number DPI Rule Name Release Date Vulnerability Protection Compatibility
CVE-2021-24078 1010766 Identified Non Existing DNS Resource Record (RR) Types In DNS Traffic (CVE-2021-24078) 10-Feb-21 YES
CVE-2021-24072 1010764 Microsoft SharePoint Server Remote Code Execution Vulnerability (CVE-2021-24072) 10-Feb-21 YES