CVE-2025-53378 - CVE House
Back to Database
Status published High CVE-2025-53378

A missing authentication vulnerability in Trend Micro Worry-Free Business Security...

Vulnerability Description

A missing authentication vulnerability in Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an unauthenticated attacker to remotely take control of the agent on affected installations. Also note: this vulnerability only affected the SaaS client version of WFBSS only, meaning the on-premise version of Worry-Free Business Security was not affected, and this issue was addressed in a WFBSS monthly maintenance update. Therefore no other customer action is required to mitigate if the WFBSS agents are on the regular SaaS maintenance deployment schedule and this disclosure is for informational purposes only.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-53378

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Trend Micro, Inc.

View all reports →

Affected Software

Trend Micro Worry-Free Business Security Services
Vulnerable Versions:
SaaS

Timeline

Official Publish: July 10th, 2025
Last Modified: July 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

Weaknesses (CWE)