Hard-Coded Password Vulnerability in Trend Micro Home Network Security

CVE-2021-32459

What is CVE-2021-32459?

Trend Micro Home Network Security versions 6.6.604 and earlier contain a hard-coded password vulnerability within the log collection server. This security flaw enables attackers, who have already gained the ability to execute high-privileged code on the target device, to exploit this weakness by sending specially crafted network requests. Such exploitation can allow for unauthorized access and arbitrary authentication, posing a significant risk to network security. Users should ensure they are using updated software versions to mitigate this risk.

References