CVE-2022-28339

State: Published
Severity: 7.3 High
Published: Feb 22, 2025
Updated: Feb 24, 2025
Reserved: Apr 1, 2022

Description

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	trendmicro

Weaknesses

CWE-427 Uncontrolled Search Path Element

Affected Products

Product	Versions
Trend Micro HouseCall for Home NetworksTrend Micro, Inc.	5.3 to before 5.3.1308Affected

References

https://helpcenter.trendmicro.com/en-us/article/tmka-21734
https://www.zerodayinitiative.com/advisories/ZDI-22-620/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.