CVE-2021-32459

2021-05-2710:42:55

trendmicro

www.cve.org

0.001 Low

EPSS

Percentile

28.5%

JSON

Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network request to lead to arbitrary authentication. An attacker must first obtain the ability to execute high-privileged code on the target device in order to exploit this vulnerability.

CNA Affected

[
  {
    "product": "Trend Micro Home Network Security",
    "vendor": "Trend Micro",
    "versions": [
      {
        "status": "affected",
        "version": "6.6.604 and below"
      }
    ]
  }
]