CVE-2021-31519: Trend Micro HouseCall for Home Networks Incorrect Permission Assignment Privilege Escalation Vulnerability
An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro HouseCall for Home Networks. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the product installer. The issue results from incorrect permissions set on product folders created by the installer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of an administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-31519?
The severity of CVE-2021-31519 is considered to be high due to its potential for privilege escalation.
How do I fix CVE-2021-31519?
To fix CVE-2021-31519, update Trend Micro HouseCall for Home Networks to version 5.3.1180 or later.
What products are affected by CVE-2021-31519?
CVE-2021-31519 affects Trend Micro HouseCall for Home Networks version 5.3.1179 and below.
Can CVE-2021-31519 be exploited remotely?
CVE-2021-31519 requires local access to exploit, meaning it cannot be exploited remotely without prior access.
What type of vulnerability is CVE-2021-31519?
CVE-2021-31519 is an incorrect permission vulnerability that can allow privilege escalation.