Vulnerability · Published Sep 29, 2021 · Assigned by trendmicro
CVE-2021-32466
High 7.0
In plain English
A high-severity uncontrolled search path in Trend Micro HouseCall for Home Networks from Trend Micro. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Official description
An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Trend Micro HouseCall for Home Networks | 5.3.1225 and below |
Weakness: CWE-427
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-10626 x_refsource_MISC
- https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621 x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-21-1112/ x_refsource_MISC