How severe is CVE-2001-1151?

CVE-2001-1151 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2001-1151 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-1151?

CVE-2001-1151 primarily affects Trend Micro Officescan. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2001-1151?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2001-1151 published?

CVE-2001-1151 was published on 2001-10-15 and last updated on 2026-06-16.

CVE-2001-1151

CVE-2001-1151 is a medium-severity vulnerability in Trend Micro Officescan with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 2% (82nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Trend Micro Officescan
Published: 2001-10-15
Last modified: 2026-06-16

Description

Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.

Frequently asked questions

What is CVE-2001-1151?: Trend Micro OfficeScan Corporate Edition (aka Virus Buster) 3.53 allows remote attackers to access sensitive information from the hotdownload directory without authentication, such as the ofcscan.ini configuration file, which contains a weakly encrypted password.
How severe is CVE-2001-1151?: CVE-2001-1151 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2001-1151 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-1151?: CVE-2001-1151 primarily affects Trend Micro Officescan. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2001-1151?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2001-1151 published?: CVE-2001-1151 was published on 2001-10-15 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:trend_micro:officescan:corporate_3.53:*:*:*:*:*:*:*
cpe:2.3:a:trend_micro:virus_buster:corporate_3.53:*:*:*:*:*:*:*

More vulnerabilities in Trend Micro Officescan

CVE-2008-3865 — Critical (CVSS 10.0): Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro…
CVE-2008-3862 — Critical (CVSS 10.0): Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other…
CVE-2008-4402 — Critical (CVSS 10.0): Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1…
CVE-2008-2437 — Critical (CVSS 10.0): Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds,…
CVE-2007-3454 — Critical (CVSS 10.0): Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows…
CVE-2007-3455 — Critical (CVSS 10.0): cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass…

All CVEs affecting Trend Micro Officescan →