March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – APT DPRK-Nexus Group – Active IOCs
April 12, 2022
Rewterz Threat Advisory – Multiple Apache Vulnerabilities
April 13, 2022
Rewterz Threat Alert – APT DPRK-Nexus Group – Active IOCs
April 12, 2022
Rewterz Threat Advisory – Multiple Apache Vulnerabilities
April 13, 2022
Severity
High
Analysis Summary
CVE-2022-28339
This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro HouseCall for Home Networks. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the log4j scanner. The process loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of an administrator.
Impact
Privilege Escalation
Indicators Of Compromise
CVE
CVE-2022-28339
Affected Vendors
Trend Micro
Affected Products
HouseCall for Home Networks
Remediation
For patches, updates, and workarounds refer to the following vendor website: