CVE-2022-28339
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Feb 22, 2025
Updated: Feb 24, 2025
CWE ID 427
Summary
CVE-2022-28339 is a vulnerability affecting Trend Micro HouseCall for Home Networks versions 5.3.1302 and below. This issue involves an uncontrolled search patch element, which can be exploited by attackers with low user privileges. By creating a malicious DLL, they can potentially elevate their privileges, gaining unauthorized access to sensitive information or system functions. This vulnerability poses a significant risk to network security and requires immediate attention from users to update their software to a secure version.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Vendors
- Trend Micro