Cyber Risks · Cisco Talos

Vulnerability Spotlight: Multiple vulnerabilities in Trend Micro Home Network Security Station

Summary: Cisco Talos discovered multiple vulnerabilities in Trend Micro's Home Network Security Station, a device that monitors and protects home networks. TALOS-2021-1230 (CVE-2021-32457) and TALOS-2021-1231 (CVE-2021-32458) are elevation of privilege vulnerabilities, and TALOS-2021-1241 (CVE-2021-32459) sits within a set of hardcoded credentials that could let an attacker create files, change file permissions, and upload arbitrary data to an SFTP server.

What's compelling: The flaws affect Home Network Security version 6.1.567, which Talos tested and confirmed could be exploited, and the fix depends on users applying Trend Micro's update to a device whose job is to guard the home network.

Read the original at Cisco Talos ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2021-32457CVE-2021-32458CVE-2021-32459
Related