Description (CNA)
An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trend Micro / Trend Micro HouseCall for Home Networks | affected 5.3.1225 and below |
CWE
CWE-427
References
- https://helpcenter.trendmicro.com/en-us/article/tmka-10626
- https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621
- https://www.zerodayinitiative.com/advisories/ZDI-21-1112/
ADP enrichment
No English description supplied.