CVE-2021-32459: Use of Hard-coded Credentials

Trend Micro Home Network Security version 6.6.604 and earlier contains a hard-coded password vulnerability in the log collection server which could allow an attacker to use a specially crafted network request to lead to arbitrary authentication. An attacker must first obtain the ability to execut...

PT-2021-19711

Name of the Vulnerable Software and Affected Versions: Trend Micro Home Network Security versions 6.6.604 and earlier Description: The issue concerns a hard-coded password vulnerability in the log collection server. This could allow an attacker to use a specially crafted network request to lead t...

PT-2021-19710

Name of the Vulnerable Software and Affected Versions: Trend Micro Home Network Security versions 6.6.604 and earlier Description: The issue is related to an iotcl stack-based buffer overflow, which could allow an attacker to execute code on affected devices by issuing a specially crafted iotcl. ...

CVE-2021-32458: Out-of-bounds Write

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl which could lead to code execution on affected devices. An attacker must first obtain the ability to...

CVE-2021-32457

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute...

CVE-2021-32457

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute...

CVE-2021-32457

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute...

Stack overflow

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute...

CVE-2021-32457

CVE-2021-32457 affects Trend Micro Home Network Security (HNS) stations; vulnerability in the tdts.ko chrdev_ioctl_handle, where the upper IOCTL bits are blindly used to index a stack buffer, causing a stack-based overflow in kernel space. This can lead to kernel panic/DoS and, in the same class ...

CVE-2021-32457

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute...

PT-2021-19709

Name of the Vulnerable Software and Affected Versions: Trend Micro Home Network Security versions 6.6.604 and earlier Description: The issue allows an attacker to escalate privileges on affected devices by issuing a specially crafted iotcl, exploiting a stack-based buffer overflow vulnerability. ...

CVE-2021-32457: Out-of-bounds Write

Trend Micro Home Network Security version 6.6.604 and earlier is vulnerable to an iotcl stack-based buffer overflow vulnerability which could allow an attacker to issue a specially crafted iotcl to escalate privileges on affected devices. An attacker must first obtain the ability to execute...

Trend Micro Bugs Threaten Home Network Security

Three security vulnerabilities have been found in Trend Micro’s Home Network Security systems, which can allow denial of service DoS, privilege escalation, code execution and authentication bypass. The Home Network Security Station is an all-in-one device that scans for vulnerabilities for...

Apple Patches Zero-Day Flaw in MacOS that Allows for Sneaky Screenshots

Apple has patched a critical bug in macOS that could be exploited to take screenshots of someone’s computer and capture images of their activity within applications or on video conferences without that person knowing. Apple addressed the vulnerability—discovered by researchers at enterprise...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. macOS is vulnerable to a privilege-granting and access-control issue, which arises from an application that does not properly impose security restrictions within the AMD subsystem. A local user can trigger a...

Trend Micro Maximum Security elevation of privilege vulnerability (CNVD-2021-39046)

Trend Micro Maximum Security is a set of computer security protection software from Trend Micro. The software includes features such as virus detection, malware protection and authentication protection. A security vulnerability exists in Maximum Security that stems from incorrect default...

Vulnerability Spotlight: Multiple vulnerabilities in Trend Micro Home Network Security Station

Carl Hurd and Kelly Leuschner of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in Trend Micro’s Home Network Security Station. The Home Network Security Station is a device that monitors and protects home... This is only t...

Trend Micro Home Network Security 缓冲区错误漏洞

Trend Micro Home Network Security is a network appliance from Trend Micro, Inc. It is used to scan all incoming and outgoing traffic to and from the home network to prevent intrusions, block hacking and cyber threats, and protect privacy. An elevation of privilege vulnerability exists in the...

Trend Micro Home Network Security 信任管理问题漏洞

Trend Micro Home Network Security is a network appliance from Trend Micro, Inc. It is used to scan all incoming and outgoing traffic to and from the home network to prevent intrusions, block hacking and cyber threats, and protect privacy. There is a security vulnerability in Trend Micro Home...

Trend Micro Inc. Home Network Security SFTP log collection server hard-coded password vulnerability

Summary A hard-coded password vulnerability exists in the SFTP Log Collection Server function of Trend Micro Inc.’s Home Network Security 6.1.567. A specially crafted network request can lead to arbitrary authentication. An attacker can send an unauthenticated message to trigger this vulnerabilit...