CVE-2021-31519

7.3HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Housecall For Home Networks
Vendor
CVE Published:
12 May 2021

Summary

An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

Affected Version(s)

Trend Micro HouseCall for Home Networks 5.3.1179 and below

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-10310
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-475/
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.