CVE-2022-28339 — HIGH (7.3)

Q: How severe is CVE-2022-28339?

CVE-2022-28339 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-28339?

Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Housecall For Home Networks, Microsoft Windows.

Vulnerability Description

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Trendmicro	Housecall For Home Networks	< 5.3.1308
Microsoft	Windows	-

Related Weaknesses (CWE)

CWE-427

References

https://helpcenter.trendmicro.com/en-us/article/tmka-21734Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-620/Third Party Advisory

FAQ

What is CVE-2022-28339?

CVE-2022-28339 is a vulnerability with a CVSS score of 7.3 (HIGH). Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicio...

How severe is CVE-2022-28339?

CVE-2022-28339 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-28339?

Check the references section above for vendor advisories and patch information. Affected products include: Trendmicro Housecall For Home Networks, Microsoft Windows.