CVE-2022-28339 - Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges

Back Back to CVE browser

HIGH

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges

Published Feb 22, 2025

7.8

HIGH

CVSS 3.1

EPSS 0.28%

Description

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges.

Affected products

Vendor Trend Micro, Inc. Product Trend Micro HouseCall for Home Networks Default
n/a
- Version
  5.3
  Status
  affected
  Constraints
  <5.3.1308

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trend Micro, Inc.

Trend Micro HouseCall for Home Networks

n/a

Version	Status	Constraints
5.3	affected	<5.3.1308

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-32791
Advisory
https://helpcenter.trendmicro.com/en-us/article/tmka-21734
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-620/
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-32791		Advisory
https://helpcenter.trendmicro.com/en-us/article/tmka-21734		Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-620/		Third Party Advisory