CVE-2021-32466

Katalog CVE

CVSS 7.0 · High EPSS 0,52%

Kerentanan Uncontrolled Search Path Element pada trendmicro housecall for home networks. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

Rincian

Terbit di NVD

29 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,52% peluang dieksploitasi; lebih tinggi dari 42,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpcenter.trendmicro.com/en-us/article/tmka-10626 advisory vendor
• https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621 patch · advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-21-1112/ advisory pihak ketiga · vdb entry