An uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall for Home Networks version 5.3.1225 and below could allow an attacker to escalate privileges by placing a custom crafted file in a specific directory to load a malicious library. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
| Link | Tags |
|---|---|
| https://helpcenter.trendmicro.com/en-us/article/tmka-10626 | vendor advisory |
| https://helpcenter.trendmicro.com/ja-jp/article/TMKA-10621 | patch vendor advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-1112/ | vdb entry third party advisory |