ZDI-CAN-13794: Trend Micro HouseCall for Home Networks Uncontrolled Search Path Element Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro HouseCall for Home Networks. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of OpenSSL. The process loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of an administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-13794?
The severity of ZDI-CAN-13794 is considered high as it allows local privilege escalation.
How do I fix ZDI-CAN-13794?
To fix ZDI-CAN-13794, users should update Trend Micro HouseCall for Home Networks to the latest version provided by the vendor.
Who is affected by ZDI-CAN-13794?
ZDI-CAN-13794 affects users of Trend Micro HouseCall for Home Networks installations that have not been updated.
What is the exploit vector for ZDI-CAN-13794?
The exploit vector for ZDI-CAN-13794 requires an attacker to have the ability to execute low-privileged code on the target system.
Should I be concerned about ZDI-CAN-13794?
Yes, you should be concerned about ZDI-CAN-13794 if you are using the affected software version, as it poses a risk of privilege escalation.