Trend Micro HouseCall for Home Networks Uncontrolled Search Path Element Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Trend Micro HouseCall for Home Networks, specifically in versions through 5.3.1302. This vulnerability arises from an uncontrolled search path element, allowing an attacker with low user privileges to create a malicious DLL that could be used to escalate privileges. The issue is present within the log4j scanner, where the process loads files from an unsecured location, potentially enabling the execution of arbitrary code with administrative rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local attacker to execute arbitrary code with administrative privileges on the affected system.

Remediation

Users are advised to update to Trend Micro HouseCall for Home Networks version 5.3.1308, which addresses this vulnerability.