Vulnerabilities (CVE)

Filtered by vendor Trendmicro Subscribe
Filtered by product Home Network Security
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-32459 1 Trendmicro 1 Home Network Security 2024-02-04 5.5 MEDIUM 6.5 MEDIUM
Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network request to lead to arbitrary authentication. An attacker must first obtain the ability to execute high-privileged code on the target device in order to exploit this vulnerability.
CVE-2021-31518 1 Trendmicro 1 Home Network Security 2024-02-04 7.8 HIGH 7.5 HIGH
Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31517.
CVE-2021-31517 1 Trendmicro 1 Home Network Security 2024-02-04 7.8 HIGH 7.5 HIGH
Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31518.
CVE-2021-32457 1 Trendmicro 1 Home Network Security 2024-02-04 4.6 MEDIUM 7.8 HIGH
Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute low-privileged code on the target device in order to exploit this vulnerability.
CVE-2021-32458 1 Trendmicro 1 Home Network Security 2024-02-04 7.2 HIGH 7.8 HIGH
Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl which could lead to code execution on affected devices. An attacker must first obtain the ability to execute low-privileged code on the target device in order to exploit this vulnerability.