CVE-2021-32459

CVE-2021-32459 : A hard-coded credential exists in Trend Micro Home Network Security’s log collection server. Exploitation requires a specially crafted request to achieve arbitrary authentication, potentially enabling log data manipulation or exfiltration. Affected versions reported include Trend...

CVE-2021-31517

The connected documents confirm that CVE-2021-31517 affects Trend Micro Home Network Security 6.5.599 and earlier, describing a file‑parsing vulnerability that can cause a denial‑of‑service on the device. Related CVE-2021-31518 is similar but not identical. Public sources (NVD/Red Hat and CNVD va...

CVE-2021-32457

CVE-2021-32457 affects Trend Micro Home Network Security (HNS) stations; vulnerability in the tdts.ko chrdev_ioctl_handle, where the upper IOCTL bits are blindly used to index a stack buffer, causing a stack-based overflow in kernel space. This can lead to kernel panic/DoS and, in the same class ...

CVE-2021-32458

Trend Micro Home Network Security has a stack-based buffer overflow in the tdts.ko chrdev_ioctl_handle ioctl handler (Trend Micro HNS 6.1.567 and earlier; referenced advisories discuss later versions). The vulnerability arises from lack of input validation on ioctl requests, where the upper bits ...

CVE-2021-31518

CVE-2021-31518 affects Trend Micro Home Network Security 6.5.599 and earlier. The available connected documents describe a file-parsing vulnerability that can allow an attacker to cause a denial-of-service on the device. The issue is noted as similar but not identical to CVE-2021-31517; no specif...