CVE-2021-31519: Trend Micro HouseCall for Home Networks Incorrect Permission Assignment Privilege Escalation Vulnerability
First published: Wed May 12 2021(Updated: )
An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.
Credit: security@trendmicro.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Housecall For Home Networks | <=5.3.1179 | |
| Microsoft Windows | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-31519?
The severity of CVE-2021-31519 is considered to be high due to its potential for privilege escalation.
How do I fix CVE-2021-31519?
To fix CVE-2021-31519, update Trend Micro HouseCall for Home Networks to version 5.3.1180 or later.
What products are affected by CVE-2021-31519?
CVE-2021-31519 affects Trend Micro HouseCall for Home Networks version 5.3.1179 and below.
Can CVE-2021-31519 be exploited remotely?
CVE-2021-31519 requires local access to exploit, meaning it cannot be exploited remotely without prior access.
What type of vulnerability is CVE-2021-31519?
CVE-2021-31519 is an incorrect permission vulnerability that can allow privilege escalation.
- collector/nvd-index
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/title
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-475
- alias/ZDI-CAN-12553
- alias/CVE-2021-31519
- agent/software-canonical-lookup
- agent/event
- agent/trending
- agent/tags
- agent/source
- vendor/trendmicro
- canonical/trendmicro housecall for home networks
- version/trendmicro housecall for home networks/5.3.1179
- vendor/microsoft
- canonical/microsoft windows
- vendor/trend micro
- canonical/trend micro housecall for home networks