Privilege Escalation Flaw in Trend Micro HouseCall for Home Networks
CVE-2021-31519

7.3HIGH

Key Information:

Vendor
Trend Micro
Status
Trend Micro Housecall For Home Networks
Vendor
CVE Published:
12 May 2021

Summary

A vulnerability exists within the installer folders of Trend Micro HouseCall for Home Networks that permits an attacker with initial low-privileged access to escalate their privileges. By placing arbitrary code in a designated folder, the attacker can have that code executed with elevated privileges by an Administrator scanning the target system. This highlights the significance of strict permission settings in software components to prevent unauthorized code execution.

Affected Version(s)

Trend Micro HouseCall for Home Networks 5.3.1179 and below

References

https://helpcenter.trendmicro.com/en-us/article/TMKA-10310
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-21-475/
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.