Vulnerability Details CVE-2021-32466
An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.6%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 6.9
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-10626
- https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621
- https://www.zerodayinitiative.com/advisories/ZDI-21-1112/
- https://helpcenter.trendmicro.com/en-us/article/tmka-10626
- https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621
- https://www.zerodayinitiative.com/advisories/ZDI-21-1112/
Products affected by CVE-2021-32466
-
cpe:2.3:a:trendmicro:housecall_for_home_networks:-
-
cpe:2.3:a:trendmicro:housecall_for_home_networks:5.3.0.1063
-
cpe:2.3:a:trendmicro:housecall_for_home_networks:5.3.1179
-
cpe:2.3:a:trendmicro:housecall_for_home_networks:5.3.1206
-
cpe:2.3:a:trendmicro:housecall_for_home_networks:5.3.1225
-
cpe:2.3:o:microsoft:windows:-