An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
References
| Link | Resource |
|---|---|
| https://helpcenter.trendmicro.com/en-us/article/tmka-10626 | Vendor Advisory |
| https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621 | Patch Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-1112/ | Third Party Advisory VDB Entry |
| https://helpcenter.trendmicro.com/en-us/article/tmka-10626 | Vendor Advisory |
| https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621 | Patch Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-1112/ | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 06:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://helpcenter.trendmicro.com/en-us/article/tmka-10626 - Vendor Advisory | |
| References | () https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621 - Patch, Vendor Advisory | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-21-1112/ - Third Party Advisory, VDB Entry |
Information
Published : 2021-09-29 11:15
Updated : 2024-11-21 06:07
NVD link : CVE-2021-32466
Mitre link : CVE-2021-32466
CVE.ORG link : CVE-2021-32466
JSON object : View
Products Affected
trendmicro
- housecall_for_home_networks
microsoft
- windows
CWE
CWE-427
Uncontrolled Search Path Element