CVE-2022-28339

HIGH

7.3

Description

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges.

CVE Details

CVSS v3.1 Score7.3

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionREQUIRED

Published2/22/2025

Last Modified7/29/2025

Sourcenvd

Honeypot Sightings0

Affected Products

microsoft:windowstrendmicro:housecall_for_home_networks

Weaknesses (CWE)

CWE-427

References

https://helpcenter.trendmicro.com/en-us/article/tmka-21734(security@trendmicro.com)

https://www.zerodayinitiative.com/advisories/ZDI-22-620/(security@trendmicro.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.