CVE-2022-28339

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges.

Score

CVSS 3.1 7.8 High

Status

Analyzed - security@trendmicro.com

Published

2025-02-22

Last modified

2025-02-24

Weaknesses

CWE-427

Affected products

• Trend Micro Housecall For Home Networks (Trend Micro Inc.)
• Housecall For Home Networks (Trendmicro)

References

• https://helpcenter.trendmicro.com/en-us/article/tmka-21734
• https://www.zerodayinitiative.com/advisories/ZDI-22-620/