CVE:CVE-2021-36741
CNNVD:CNNVD-202107-2108
Trend Micro OfficeScan XG等都是美国趋势科技（Trend Micro）公司的产品。Trend Micro OfficeScan XG是一套分布式反病毒软件。Trend Micro Apex One是一套能够提供自动威胁检测和响应功能的端点安全防护软件。Trend Micro Worry-Free Business Security是一套企业级信息安全防护解决方案。
Trend Micro 多款产品存在输入验证错误漏洞，该漏洞允许攻击者远程连接在受影响的设备上上传任意文件。以下产品和版本受到影响：Trend Micro Apex One, Apex One as a Service, OfficeScan XG和 Worry-Free Business Security 10.0 SP1。
solution:Upgrade trendmicro officescan to a higher version than xg:sp1,and avoid the version xg:sp1; Upgrade trendmicro officescan_business_security to a higher version than 10.0:sp1,and avoid the version 10.0:sp1; Upgrade trendmicro apex_one to a higher version than 2019,and avoid the version 2019; Upgrade trendmicro worry-free_business_security to a higher version than 10.0:sp1,and avoid the version 10.0:sp1