CVE-2021-32458: trend micro trend micro home network security Out-of-bounds Write
Vulnerability summary
CVE-2021-32458 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in trend micro trend micro home network security. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.8% of scored vulnerabilities.
Timeline
- 27-05-2021PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl which could lead to code execution on affected devices. An attacker must first obtain the ability to execute low-privileged code on the target device in order to exploit this vulnerability.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.39%
Chance of exploitation in the next 30 days
Percentile
32%
Versus all other CVEs
30-day change
0.00 pp
From 0.39% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Trend micro1 product
- trend micro home network security6.6.604 and below
Trendmicro1 product
- home_network_security≤ 6.6.604
2 vendors · 2 products