High severity · published Feb 22, 2025
CVE-2022-28339
Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could allow an attacker with low user privileges to create a malicious DLL that could lead to escalated privileges.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TM
Trend Micro HouseCall for Home Networks · Trend Micro, Inc.
5.3 before 5.3.1308 · source: vendor
HF
Housecall For Home Networks · Trendmicro
before 5.3.1308 · source: NVD
Affected product
TM
Trend Micro HouseCall for Home Networks
Trend Micro, Inc.