Stack-Based Buffer Overflow Vulnerability in Trend Micro Home Network Security

CVE-2021-32457

Summary

Trend Micro Home Network Security versions 6.6.604 and earlier are susceptible to a stack-based buffer overflow vulnerability related to the iotcl interface. This weakness allows an attacker to send a specially crafted iotcl request that could escalate privileges on the affected devices. To successfully exploit this vulnerability, an attacker must first gain the ability to execute low-privileged code on the target device. This exploit can potentially lead to unauthorized access and control over network security settings.

References