CVE-2021-25247: trend micro trend micro housecall for home networks Uncontrolled Search Path Element

Vulnerability summary

CVE-2021-25247 is a high (CVSS 7.8) Uncontrolled Search Path Element vulnerability in trend micro trend micro housecall for home networks. EPSS estimates a 0.75% chance of exploitation in the next 30 days, higher than 54.1% of scored vulnerabilities.

Timeline

1. 27-01-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability.

• CWE-427Uncontrolled Search Path ElementThe product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.